CVE-2018-6521: Critical severity SimpleSAMLphp SimpleSAMLphp vulnerability
The sqlauth module in SimpleSAMLphp before 1.15.2 relies on the MySQL utf8 charset, which truncates queries upon encountering four-byte characters. There might be a scenario in which this allows remote attackers to bypass intended access restrictions.
Other sources
Use of insecure connection charset (sqlauth module)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/simplesamlphpto a version that resolves this vulnerability.Fixed in 1.16.3-1+deb10u2Fixed in 1.16.3-1+deb10u1Fixed in 1.19.0-1Fixed in 1.19.7-1 - Upgrade
Upgrade
composer/simplesamlphp/simplesamlphpto a version that resolves this vulnerability.Fixed in 1.15.2 - Upgrade
Upgrade
SimpleSAMLphp sqlauth moduleto a version that resolves this vulnerability.Fixed in 1.15.2 - Compensating control
Mitigate by avoiding MySQL utf8 charset usage with the sqlauth module because it truncates queries on four-byte characters, which may allow bypass of intended access restrictions.
Event History
Frequently Asked Questions
What is CVE-2018-6521?
CVE-2018-6521 is a vulnerability in the sqlauth module of SimpleSAMLphp before version 1.15.2 that allows remote attackers to bypass access restrictions.
What is the severity of CVE-2018-6521?
The severity of CVE-2018-6521 is critical with a CVSS score of 9.8.
How does CVE-2018-6521 impact SimpleSAMLphp?
CVE-2018-6521 impacts SimpleSAMLphp by relying on the MySQL utf8 charset, which can truncate queries containing four-byte characters.
How can remote attackers exploit CVE-2018-6521?
Remote attackers can exploit CVE-2018-6521 to bypass intended access restrictions.
How can I fix CVE-2018-6521?
To fix CVE-2018-6521, update SimpleSAMLphp to version 1.15.2 or higher.