Known Vulnerabilities for products from Pysaml2 Project
Listed below are 7 of the newest known vulnerabilities associated with the vendor "Pysaml2 Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-21239 json | PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryp... | 6.5 - MEDIUM | 2021-01-21 | 2021-03-10 |
| CVE-2021-21238 json | PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryp... | 6.5 - MEDIUM | 2021-01-21 | 2021-01-29 |
| CVE-2020-5390 json | PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effecti... | 7.5 - HIGH | 2020-01-13 | 2023-02-01 |
| CVE-2017-1000433 json | pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log ... | 8.1 - HIGH | 2018-01-02 | 2021-03-04 |
| CVE-2017-1000246 json | Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across encryptions in the IDP server, resul... | 5.3 - MEDIUM | 2017-11-17 | 2019-10-03 |
| CVE-2016-10149 json | XML External Entity (XXE) vulnerability in PySAML2 4.4.0 and earlier allows remote attackers to read arbitrary files via a cr... | 7.5 - HIGH | 2017-03-24 | 2018-01-05 |
| CVE-2016-10127 json | PySAML2 allows remote attackers to conduct XML external entity (XXE) attacks via a crafted SAML XML request or response. | 9 - CRITICAL | 2017-03-03 | 2017-03-08 |
Known software with vulnerabilities from Pysaml2 Project
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Pysaml2 Project | Pysaml2 | - |