CVE-2016-5697: High severity onelogin Ruby-SAML vulnerability
Ruby-saml before 1.3.0 allows attackers to perform XML signature wrapping attacks via unspecified vectors.
Other sources
ruby-saml prior to version 1.3.0 is vulnerable to an XML signature wrapping attack in the specific scenario where there was a signature that referenced at the same time 2 elements (but past the scheme validator process since 1 of the element was inside the encrypted assertion). ruby-saml users must update to 1.3.0, which implements 3 extra validations to mitigate this kind of attack.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5697?
CVE-2016-5697 is classified as a moderate severity vulnerability.
How do I fix CVE-2016-5697?
To fix CVE-2016-5697, upgrade ruby-saml to version 1.3.0 or later.
What types of attacks can be executed due to CVE-2016-5697?
CVE-2016-5697 allows attackers to perform XML signature wrapping attacks.
Which versions of ruby-saml are affected by CVE-2016-5697?
ruby-saml versions before 1.3.0 are affected by CVE-2016-5697.
Is there a specific condition under which CVE-2016-5697 can be exploited?
Yes, CVE-2016-5697 is vulnerable in scenarios where a signature references two elements simultaneously.