medium5.3
CVE-2016-3124
SimpleSAMLphp Information leakage issue in the sanitycheck module
Impact
The sanitycheck module in SimpleSAMLphp before 1.14.1 allows remote attackers to learn the PHP version on the system via unspecified vectors.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | simplesamlphp/simplesamlphp | < 1.14.1 | 1.14.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simplesamlphp | Simplesamlphp | through 1.14.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- http://www.securityfocus.com/bid/96134
- https://simplesamlphp.org/security/201603-01
- https://github.com/advisories/GHSA-9327-mqm6-x97j
- https://nvd.nist.gov/vuln/detail/CVE-2016-3124
- https://github.com/FriendsOfPHP/security-advisories/blob/master/simplesamlphp/simplesamlphp/CVE-2016-3124.yaml