Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate others or elevate privileges by creating a crafted XML message.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: debian
Published:
Updated: 2024-08-04T19:12:09.411Z
Reserved: 2018-12-31T00:00:00
Link: CVE-2019-3465

No data.

Status : Modified
Published: 2019-11-07T20:15:11.090
Modified: 2024-11-21T04:42:06.050
Link: CVE-2019-3465

No data.