{"id":"CVE-2017-11428","published":"2019-04-17T13:59:53Z","modified":"2024-08-05T18:12:39Z","title":"Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal","vendor":"OneLogin","product":"Ruby-SAML","tier":"tail","description":{"text":"OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.","provenance":"source","from":"CVE.org"},"cvss":{"score":7.7,"severity":"HIGH","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.02464,"percentile":0.84414,"provenance":"source"},"cwes":[{"id":"CWE-287","name":"Improper Authentication"}],"references":[{"url":"https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations","tags":["x_refsource_MISC"]},{"url":"https://www.kb.cert.org/vuls/id/475445","tags":["x_refsource_MISC"]}],"priority":{"score":22.3,"factors":[{"name":"EPSS percentile","points":16.88},{"name":"CVSS severity","points":5.39}]},"vendorSlug":"onelogin","affectedVersions":[{"vendor":"OneLogin","product":"Ruby-SAML","versions":[">= unspecified, < 1.6.0"]}],"affected":[{"ecosystem":"RubyGems","package":"ruby-saml","vulnerableRanges":["<1.7.0"],"patched":["1.7.0"],"from":["GHSA-x2fr-v8wf-8wwv"],"provenance":"source"}],"euvd":{"id":"EUVD-2019-0609","exploited":false,"provenance":"source"}}