GHSA-9327-mqm6-x97j

Suggest an improvement
Source
https://github.com/advisories/GHSA-9327-mqm6-x97j
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-9327-mqm6-x97j/GHSA-9327-mqm6-x97j.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-9327-mqm6-x97j
Aliases
Published
2022-05-14T02:57:54Z
Modified
2024-04-25T21:57:34Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
SimpleSAMLphp Information leakage issue in the sanitycheck module
Details

The sanitycheck module in SimpleSAMLphp before 1.14.1 allows remote attackers to learn the PHP version on the system via unspecified vectors.

Database specific 
{
    "cwe_ids":  [
        "CWE-200"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2024-04-25T21:36:32Z",
    "nvd_published_at":  "2017-02-07T17:59:00Z",
    "severity":  "MODERATE"
}
References

Affected packages

Packagist / simplesamlphp/simplesamlphp

Package

Name
simplesamlphp/simplesamlphp
Purl
pkg:composer/simplesamlphp/simplesamlphp

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.14.1

Affected versions

v1.*
v1.12.0
v1.13.0-rc1
v1.13.0-rc2
v1.13.0
v1.13.1
v1.13.2
v1.14.0-rc1
v1.14.0

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-9327-mqm6-x97j/GHSA-9327-mqm6-x97j.json"