CVE-2016-3124: Infoleak
Published Mar 7, 2016
·Updated
Information leakage issue in the sanitycheck module
Other sources
The sanitycheck module in SimpleSAMLphp before 1.14.1 allows remote attackers to learn the PHP version on the system via unspecified vectors.
Affected Software
3 affected componentsFixes available
composer/simplesamlphp/simplesamlphp<1.14.1
composer/simplesamlphp/simplesamlphp<1.14.1
1.14.1
SimpleSAMLphp<=1.14.0
Event History
Mar 7, 2016
Advisory Published
01:04 PM
Feb 7, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
via NVD·05:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-3124?
CVE-2016-3124 is considered a low severity vulnerability as it only allows information leakage without direct exploitation.
2
How do I fix CVE-2016-3124?
To fix CVE-2016-3124, upgrade SimpleSAMLphp to version 1.14.1 or later.
3
What kind of information does CVE-2016-3124 leak?
CVE-2016-3124 allows attackers to determine the PHP version running on the server.
4
Is my version of SimpleSAMLphp affected by CVE-2016-3124?
If you are using a version of SimpleSAMLphp prior to 1.14.1, you are affected by CVE-2016-3124.
5
What module is affected by the CVE-2016-3124 vulnerability?
The vulnerability in CVE-2016-3124 is associated with the sanitycheck module of SimpleSAMLphp.