CVE-2018-6521 | BDVDB-2026-95996 Detail

Description#

The sqlauth module in SimpleSAMLphp before 1.15.2 relies on the MySQL utf8 charset, which truncates queries upon encountering four-byte characters. There might be a scenario in which this allows remote attackers to bypass intended access restrictions.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://simplesamlphp.org/security/201801-03
https://lists.debian.org/debian-lts-announce/2018/02/msg00008.html
https://www.debian.org/security/2018/dsa-4127

Exploit#

No public exploit known

History#

Version 12018-02-02Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.