Description
SimpleSAMLphp versions before 1.18.6 contain an information disclosure vulnerability. Prior to 2.4.7 and 2.5.2, SimpleSAMLphp's SAML SP ACS path does not enforce the IdP selected for an SP-initiated login when unsigned Response/InResponseTo is combined with a signed assertion lacking SubjectConfirmationData/InResponseTo, allowing a response issued by one trusted IdP to be bound to SP state created for another IdP and bypass flows that route users to a specific IdP, including deployments that set enable_unsolicited to false. This issue is fixed in versions 2.4.7 and 2.5.2.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 packagist | | >=2.5.0 <2.5.2 || >=0 <2.4.7 | 2.5.2, 2.4.7 |
 debian 11 | | =1.19.0-1 || =1.19.0-1+deb11u1 || =1.19.0-1+deb11u2 || =1.19.1-1 || =1.19.1-1.1 || =1.19.6-1 || =1.19.7-1 || =1.19.7-2 || =2.1.8-0.1 || =2.2.6-1 || =2.3.11-1 || =2.3.11-2 || =2.4.8-1 || =2.5.3.1-1 | - |
debian 12 | | =1.19.7-1 || =1.19.7-1+deb12u1 || =1.19.7-1+deb12u2 || =1.19.7-2 || =2.1.8-0.1 || =2.2.6-1 || =2.3.11-1 || =2.3.11-2 || =2.4.8-1 || =2.5.3.1-1 | - |
debian 14 | | =1.10.0-1 || =1.11.0-1 || =1.12.0-1 || =1.12.0~rc1-1 || =1.12.0~rc2-1 || =1.13.0-1 || =1.13.1-1 || =1.13.1-2 || =1.13.2-1 || =1.14.0-1 || =1.14.1-1 || =1.14.10-1 || =1.14.11-1 || =1.14.15-1 || =1.14.2-1 || =1.14.2-2 || =1.14.3-1 || =1.14.4-1 || =1.14.5-1 || =1.14.6-1 || =1.14.7-1 || =1.14.8-1 || =1.14.9-1 || =1.15.0-1 || =1.15.1-1 || =1.15.2-1 || =1.15.3-1 || =1.15.4-1 || =1.16.0-1 || =1.16.1-1 || =1.16.2-1 || =1.16.3-1 || =1.17.0-1 || =1.17.1-1 || =1.17.2-1 || =1.17.2-2 || =1.17.3-1 || =1.17.4-1 || =1.17.5-1 || =1.17.6-1 || =1.17.6-2 || =1.18.1-1 || =1.18.4-1 || =1.18.5-1 || =1.18.6-1 || =1.18.7-1 || =1.18.8-1 || =1.19.0-1 || =1.19.1-1 || =1.19.1-1.1 || =1.19.6-1 || =1.19.7-1 || =1.19.7-2 || =1.6.0-1 || =1.6.1-1 || =1.6.2-1 || =1.6.3-1 || =1.6.3-2 || =1.6.3-3 || =1.7.0-1 || =1.7.0-2 || =1.8.0-1 || =1.8.1-1 || =1.8.2-1 || =1.9.0-1 || =1.9.0~rc1-1 || =1.9.0~rc2-1 || =1.9.1-1 || =1.9.2-1 || =2.1.8-0.1 || =2.2.6-1 || =2.3.11-1 || =2.3.11-2 || >=0 <2.4.8-1 | 2.4.8-1 |
