VULNERABILITY INTELLIGENCE

CVE-2011-4625

CVSS score7.5 HIGH
EPSS probability0.74%
CISA KEVNot currently listed
Published2019-11-06
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

simplesamlphp before 1.6.3 (squeeze) and before 1.8.2 (sid) incorrectly handles XML encryption which could allow remote attackers to decrypt or forge messages.

Weakness classification

  • CWE-755: Improper Handling of Exceptional Conditions

Primary references