pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user without kn...

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

• Debian DEBIAN-CVE-2017-1000433 python-pysaml2 Fixed in: 4.5.0-2

References

• advisory lists.debian.org
• advisory lists.debian.org
• patch github.com
• report security.gentoo.org