USN-8770-1

Dashboard / Vulnerabilities / USN-8770-1

USN-8770-1

Summary: simplesamlphp vulnerabilities

Details: It was discovered that SimpleSAMLphp incorrectly validated cryptographic signatures in XML messages. An authenticated attacker could possibly use this issue to impersonate users or gain elevated privileges. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2019-3465) It was discovered that SimpleSAMLphp incorrectly handled external entities when parsing untrusted XML documents. A remote attacker could possibly use this issue to obtain sensitive information. This issue did not affect Ubuntu 24.04 LTS. (CVE-2024-52596) It was discovered that SimpleSAMLphp incorrectly verified signatures in SAML messages using the HTTP-Redirect binding. A remote attacker could possibly use this issue to bypass authentication and impersonate users. (CVE-2025-27773)

References: https://ubuntu.com/security/notices/USN-8770-1, https://ubuntu.com/security/CVE-2019-3465, https://ubuntu.com/security/CVE-2024-52596, https://ubuntu.com/security/CVE-2025-27773