vulnerability

Ubuntu: (CVE-2011-4625): simplesamlphp vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:P/A:N)

Published

Nov 6, 2019

Added

Nov 19, 2024

Modified

Mar 27, 2026

Description

simplesamlphp before 1.6.3 (squeeze) and before 1.8.2 (sid) incorrectly handles XML encryption which could allow remote attackers to decrypt or forge messages.

Solution

ubuntu-upgrade-simplesamlphp

References

CVE-2011-4625
https://attackerkb.com/topics/CVE-2011-4625
CWE-755
EUVD-EUVD-2022-1634
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-1634
https://www.cve.org/CVERecord?id=CVE-2011-4625

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report