Skip to content
OpenAdvisories
Medium · 5.3 CVE-2016-3124 EUVD-2022-3280GHSA-9327-mqm6-x97j

SimpleSAMLphp Information leakage issue in the sanitycheck module

Published Feb 7, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

The sanitycheck module in SimpleSAMLphp before 1.14.1 allows remote attackers to learn the PHP version on the system via unspecified vectors.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 simplesamlphp 1.14.1-1 —
Debian 12 simplesamlphp 1.14.1-1 —
ReleasePackageFixed inAdvisory
Ubuntu Pro 16.04 LTS simplesamlphp No fix yet —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist simplesamlphp/simplesamlphp < 1.14.1 1.14.1 GHSA-9327-mqm6-x97j

References