201612-03: Incorrect signature verification

December 12, 2016

An incorrect check of return values in the signature validation utilities allows an attacker to get invalid signatures accepted as valid by forcing an error during validation.

References

simplesamlphp.org/security/201612-03

Detect and mitigate 201612-03 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →