Executive brief
Ruby-SAML Improper Authentication vulnerability
Affected products
- RubyGems ruby-saml
Junglewise Threat Intelligence
CVE-2017-11428: Ruby-SAML Improper Authentication vulnerability
CVE-2017-11428 · Severity: low · CVSS 3 · Published 2019-07-05
Vendors: RubyGems.
Related threats
- Ruby-saml allows a Libxml2 Canonicalization error to bypass Digest/Signature validation
- Ruby-saml has a SAML authentication bypass due to namespace handling (parser differential)
- Ruby SAML DOS vulnerability with large SAML response
- ruby-saml vulnerable to XPath injection
- OneLogin ruby-saml XML signature wrapping attack