Vulnerabilities > Shibboleth

DATE CVE VULNERABILITY TITLE RISK
2023-06-25 CVE-2023-36661 Server-Side Request Forgery (SSRF) vulnerability in multiple products
Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element.
network
low complexity
shibboleth debian CWE-918
7.5
2023-01-11 CVE-2023-22947 Uncontrolled Search Path Element vulnerability in Shibboleth Service Provider
Insecure folder permissions in the Windows installation path of Shibboleth Service Provider (SP) before 3.4.1 allow an unprivileged local attacker to escalate privileges to SYSTEM via DLL planting in the service executable's folder.
local
low complexity
shibboleth CWE-427
7.3
2022-02-04 CVE-2022-24129 Server-Side Request Forgery (SSRF) vulnerability in Shibboleth Oidc OP
The OIDC OP plugin before 3.0.4 for Shibboleth Identity Provider allows server-side request forgery (SSRF) due to insufficient restriction of the request_uri parameter.
network
low complexity
shibboleth CWE-918
8.2
2021-04-27 CVE-2021-31826 NULL Pointer Dereference vulnerability in Shibboleth Service Provider
Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature.
network
low complexity
shibboleth CWE-476
7.5
2021-03-22 CVE-2021-28963 Injection vulnerability in multiple products
Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters.
network
low complexity
shibboleth debian CWE-74
5.3
2020-10-28 CVE-2020-27978 Allocation of Resources Without Limits or Throttling vulnerability in Shibboleth Identity Provider
Shibboleth Identify Provider 3.x before 3.4.6 has a denial of service flaw.
network
low complexity
shibboleth CWE-770
7.5
2019-11-21 CVE-2019-19191 Link Following vulnerability in Shibboleth Service Provider
Shibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by the service user (the shibd account) after installation.
local
low complexity
shibboleth CWE-59
7.8
2019-11-07 CVE-2010-2450 Use of Password Hash With Insufficient Computational Effort vulnerability in multiple products
The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which is placed in sp-key.pm.
network
low complexity
shibboleth debian CWE-916
7.5
2019-04-04 CVE-2014-3603 Improper Validation of Certificate with Host Mismatch vulnerability in Shibboleth Identity Provider and Opensaml Java
The (1) HttpResource and (2) FileBackedHttpResource implementations in Shibboleth Identity Provider (IdP) before 2.4.1 and OpenSAML Java 2.6.2 do not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
network
high complexity
shibboleth CWE-297
5.9
2018-02-27 CVE-2018-0489 Improper Verification of Cryptographic Signature vulnerability in multiple products
Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via crafted XML data.
network
low complexity
shibboleth debian arubanetworks CWE-347
6.5