CVE-2017-1000433

pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user without kn...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user without knowing their password.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2017-1000433 python-pysaml2 Corrigé dans: 4.5.0-2

Références

advisory lists.debian.org
advisory lists.debian.org
patch github.com
report security.gentoo.org