CVE-2017-11428

OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.

• CWE-287
• CWE-287

• https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementationsExploit, Technical Description, Third Party Advisory
• https://www.kb.cert.org/vuls/id/475445Third Party Advisory, US Government Resource
• https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementationsExploit, Technical Description, Third Party Advisory
• https://www.kb.cert.org/vuls/id/475445Third Party Advisory, US Government Resource

Published

Apr 17, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-11420Stack-based buffer overflow in ASUS_Discovery.c in networkma…
• CVE-2017-11421gnome-exe-thumbnailer before 0.9.5 is prone to a VBScript In…
• CVE-2017-11422Statamic framework before 2.6.0 does not correctly check a s…8.8
• CVE-2017-11423The cabd_read_string function in mspack/cabd.c in libmspack …
• CVE-2017-11424In PyJWT 1.5.0 and below the `invalid_strings` check in `HMA…
• CVE-2017-11427OneLogin PythonSAML 2.3.0 and earlier may incorrectly utiliz…7.7
• CVE-2017-11429Clever saml2-js 2.0 and earlier may incorrectly utilize the …7.7
• CVE-2017-1143IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a …
• CVE-2017-11430OmniAuth OmnitAuth-SAML 1.9.0 and earlier may incorrectly ut…7.7
• CVE-2017-11434The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick…5.5
• CVE-2017-11435The Humax Wi-Fi Router model HG100R-* 2.0.6 is prone to an a…9.8
• CVE-2017-11436D-Link DIR-615 before v20.12PTb04 has a second admin account…9.8