CVE-2017-12871

mediumpriority · track · 24EPSS 0.005 · 42 %ileEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.49% (42nd) EPSS

CVSS 4.3 · medium

Is it mine?

14 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · nvd · osv

EPSS · scored 2026-10-27

The aesEncrypt method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.x through 1.14.11 makes it easier for context-dependent attackers to bypass the encryption protection mechanism by leveraging use of the first 16 bytes of the secret key as the initialization vector (IV).

cvss

Technical severity, 0–10. One row per scoring source.

5.9

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.04.3mediumAV:N/AC:M/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USexploitability 8.6 · impact 2.9

v3.05.9mediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USexploitability 2.2 · impact 3.6

v3.05.9mediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · OSV

v3.05.4mediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-326USprimaryCWE-326US

affected products (14)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
simplesamlphp simplesamlphp= 1.14.0nvdUScpe:2.3:a:simplesamlphp:simplesamlphp:*:*:*:*:*:*:*:*
simplesamlphp simplesamlphp= 1.14.1nvdUScpe:2.3:a:simplesamlphp:simplesamlphp:*:*:*:*:*:*:*:*
simplesamlphp simplesamlphp= 1.14.10nvdUScpe:2.3:a:simplesamlphp:simplesamlphp:*:*:*:*:*:*:*:*
simplesamlphp simplesamlphp= 1.14.11nvdUScpe:2.3:a:simplesamlphp:simplesamlphp:*:*:*:*:*:*:*:*
simplesamlphp simplesamlphp= 1.14.2nvdUScpe:2.3:a:simplesamlphp:simplesamlphp:*:*:*:*:*:*:*:*
simplesamlphp simplesamlphp= 1.14.3nvdUScpe:2.3:a:simplesamlphp:simplesamlphp:*:*:*:*:*:*:*:*
simplesamlphp simplesamlphp= 1.14.4nvdUScpe:2.3:a:simplesamlphp:simplesamlphp:*:*:*:*:*:*:*:*
simplesamlphp simplesamlphp= 1.14.5nvdUScpe:2.3:a:simplesamlphp:simplesamlphp:*:*:*:*:*:*:*:*
simplesamlphp simplesamlphp= 1.14.6nvdUScpe:2.3:a:simplesamlphp:simplesamlphp:*:*:*:*:*:*:*:*
simplesamlphp simplesamlphp= 1.14.7nvdUScpe:2.3:a:simplesamlphp:simplesamlphp:*:*:*:*:*:*:*:*
simplesamlphp simplesamlphp= 1.14.8nvdUScpe:2.3:a:simplesamlphp:simplesamlphp:*:*:*:*:*:*:*:*
simplesamlphp simplesamlphp= 1.14.9nvdUScpe:2.3:a:simplesamlphp:simplesamlphp:*:*:*:*:*:*:*:*
Packagist simplesamlphp/simplesamlphp1.14.0 → 1.14.12osvUSpkg:composer/simplesamlphp/simplesamlphp

advisories (1)

Vendor and ecosystem advisories describing this.

GHSA-ww3w-592j-5qrwSimpleSAMLphp Incorrect IV generation for encryption2022-05-17ghsa · osvUS
The aesEncrypt method in `lib/SimpleSAML/Utils/Crypto.php` in SimpleSAMLphp 1.14.x through 1.14.11 makes it easier for context-dependent attackers to bypass the encryption protection mechanism by leveraging use of the first 16 bytes of the secret key as the initialization vector (IV).

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd osv NVD CVE.org MITRE

published 2017-09-01modified 2026-06-17

related (696)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2018-18325US	high7.5OT critical	74.0% (99th)	KEV	2019-07-03
DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811.
CVE-2018-15811US	high7.5OT critical	76.3% (100th)	KEV	2019-07-03
DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.
CVE-2017-1000486US	critical9.8OT critical	94.1% (100th)	KEV	2018-01-03
Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution
CVE-2017-11317US	critical9.8OT critical	84.2% (100th)	KEV	2017-08-23
Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitr…
CVE-2016-2183US	high7.5OT high	94.7% (100th)	Exploit	2016-09-01
The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which mak…

+691 more

references (6)

External citations — patches, advisories, analysis.

https://github.com/simplesamlphp/simplesamlphp/commit/77df6a932d46daa35e364925eb73a175010dc904 cnnvd
https://simplesamlphp.org/security/201703-02 cnnvd
https://github.com/simplesamlphp/simplesamlphp/commit/77df6a932d46daa35e364925eb73a175010dc904 enisa_euvd
https://simplesamlphp.org/security/201703-02 enisa_euvd
https://github.com/simplesamlphp/simplesamlphp/commit/77df6a932d46daa35e364925eb73a175010dc904Issue TrackingPatchThird Party Advisorynvd
https://simplesamlphp.org/security/201703-02Issue TrackingPatchThird Party Advisorynvd

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan