PT-2017-8344

CVE-2016-3124

Published

2017-02-07

Updated

2022-05-14

CVSS 3.1

5.3

Medium

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions prior to 1.14.1

Description The issue allows remote attackers to learn the PHP version on the system. This is due to a problem in the sanitycheck module.

Recommendations For versions prior to 1.14.1, update to version 1.14.1 or later to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

GHSA-9327-MQM6-X97J

Found an issue in the description? Have something to add? Feel free to write us 👾