MEDIUM5.3
GHSA-9327-mqm6-x97j
SimpleSAMLphp Information leakage issue in the sanitycheck module
Quick fix
GHSA-9327-mqm6-x97j — simplesamlphp/simplesamlphp: upgrade to the fixed version with the command below.
composer require simplesamlphp/simplesamlphp:^1.14.1Details
The sanitycheck module in SimpleSAMLphp before 1.14.1 allows remote attackers to learn the PHP version on the system via unspecified vectors.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/simplesamlphp/simplesamlphp
Introduced in:
0Fixed in: 1.14.1Fix
composer require simplesamlphp/simplesamlphp:^1.14.1References
- https://nvd.nist.gov/vuln/detail/CVE-2016-3124[ADVISORY]
- https://github.com/FriendsOfPHP/security-advisories/blob/master/simplesamlphp/simplesamlphp/CVE-2016-3124.yaml[WEB]
- https://github.com/simplesamlphp/simplesamlphp[PACKAGE]
- https://simplesamlphp.org/security/201603-01[WEB]
- http://www.securityfocus.com/bid/96134[WEB]