vulnerability

Ubuntu: (CVE-2017-12869): simplesamlphp vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:P/A:N)

Published

Sep 1, 2017

Added

Jun 26, 2025

Modified

Jul 28, 2025

Description

The multiauth module in SimpleSAMLphp 1.14.13 and earlier allows remote attackers to bypass authentication context restrictions and use an authentication source defined in config/authsources.php via vectors related to improper validation of user input.

Solution

no-fix-ubuntu-package

References

CVE-2017-12869
https://attackerkb.com/topics/CVE-2017-12869
https://simplesamlphp.org/security/201704-02
https://www.cve.org/CVERecord?id=CVE-2017-12869

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report