VDB

GCVE-110-CERTCC-2017-475445

GCVE-110-CERTCC-2017-475445
Advisory PublishedCVSS 6.3/10
Vulnetix · Advisory published February 27, 2018
Multiple SAML libraries may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.
Download JSON Open in Console

Risk Scores

CVSS 2.0
6.3/10
Medium · AV:N/AC:M/Au:S/C:C/I:N/A:N
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score4.9remediation_levelOFreport_confidenceCenvironmental_score4.93107416928target_distributionNDenvironmental_vectorCDP:ND/TD:ND/CR:ND/IR:ND/AR:ND

Aliases

CVE-2017-11427CVE-2017-11428CVE-2017-11429CVE-2017-11430CVE-2018-0489CVE-2018-5387

References

Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal
url
Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal
url
Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal
url
Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal
advisory

Browse GCVE Records

72,148 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›