CVE-2023-49087
Validation of SignedInfo
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
xml-security is a library that implements XML signatures and encryption. Validation of an XML signature requires verification that the hash value of the related XML-document matches a specific DigestValue-value, but also that the cryptographic signature on the SignedInfo-tree (the one that contains the DigestValue) verifies and matches a trusted public key. If an attacker somehow (i.e. by exploiting a bug in PHP's canonicalization function) manages to manipulate the canonicalized version's DigestValue, it would be possible to forge the signature. This issue has been patched in version 1.6.12 and 5.0.0-alpha.13.
xml-security es una librería que implementa cifrado y firmas XML. La validación de una firma XML requiere verificar que el valor hash del documento XML relacionado coincida con un valor DigestValue específico, pero también que la firma criptográfica en el árbol SignedInfo (el que contiene el DigestValue) verifique y coincida con una clave pública confiable. Si un atacante de alguna manera (es decir, explotando un error en la función de canonicalización de PHP) logra manipular el DigestValue de la versión canonicalizada, sería posible falsificar la firma. Este problema se solucionó en las versiones 1.6.12 y 5.0.0-alpha.13.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2023-11-21 CVE Reserved
- 2023-11-30 CVE Published
- 2024-08-02 CVE Updated
- 2024-08-02 First Exploit
- 2024-10-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-345: Insufficient Verification of Data Authenticity
CAPEC
References (2)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|---|---|
| https://github.com/simplesamlphp/xml-security/security/advisories/GHSA-ww7x-3gxh-qm6r | 2024-08-02 |
| URL | Date | SRC |
|---|---|---|
| https://github.com/simplesamlphp/xml-security/commit/f509e3083dd7870cce5880c804b5122317287581 | 2023-12-06 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Simplesamlphp Search vendor "Simplesamlphp" | Saml2 Search vendor "Simplesamlphp" for product "Saml2" | 5.0.0 Search vendor "Simplesamlphp" for product "Saml2" and version "5.0.0" | alpha12 |
Affected
| ||||||
| Simplesamlphp Search vendor "Simplesamlphp" | Xml-security Search vendor "Simplesamlphp" for product "Xml-security" | 1.6.11 Search vendor "Simplesamlphp" for product "Xml-security" and version "1.6.11" | - |
Affected
| ||||||