Skip to content
Fencer Vulns
high 8.1

CVE-2017-1000433 json

pysaml2 Improper Authentication vulnerability

published 2018-01-02 8 y ago modified 2026-06-17 4 mo ago also GHSA-924m-4pmx-c67h , PYSEC-2018-48 , EUVD-2018-0126

cvss
8.1
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
2.6%
EPSS 2.6% chance of exploitation in 30 days, percentile 85%
public exploits
0
none known

Summary

pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user without knowing their password.

Patch / fix

  • pypi pysaml2 4.5.0
  • python-pysaml2 Debian 14, Debian 13, Debian 12 4.5.0-2

debian advisories DEBIAN-CVE-2017-1000433

  • python-pysaml2 Ubuntu 16.04 LTS 3.0.0-3ubuntu1.16.04.3

ubuntu advisories UBUNTU-CVE-2017-1000433

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • crowbar OpenStack Cloud 7, Enterprise Storage 4 4.0+git.1551088848.823bcaa3-7.29.2
  • crowbar-ha OpenStack Cloud 7 4.0+git.1556181005.47c643d-4.46.3
  • crowbar-core OpenStack Cloud 7, Enterprise Storage 4 4.0+git.1556285635.ab602dd4d-9.46.3
  • python-PyKMIP OpenStack Cloud 7 0.5.0-3.3.3
  • python-pysaml2 OpenStack Cloud 7 4.0.2-3.6.3
  • crowbar-openstack OpenStack Cloud 7 4.0+git.1554887450.ff7c30c1c-9.51.3
  • openstack-heat-gbp OpenStack Cloud 7 5.1.1~dev1-2.6.3
  • openstack-ceilometer OpenStack Cloud 7 7.1.1~dev4-4.15.3

suse advisories SUSE-SU-2019:1450-1SUSE-SU-2018:1194-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2017-1000433 updated cvss 6.5

python-pysaml2: Access restriction bypass

  • Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) python-pysaml2 Red Hat OpenStack Platform 8 (Liberty) python-pysaml2 Red Hat OpenStack Platform 9 (Mitaka) python-pysaml2 Red Hat OpenStack Platform 10 (Newton) python-pysaml2 Red Hat OpenStack Platform 11 (Ocata) python-pysaml2 Red Hat OpenStack Platform 12 (Pike) python-pysaml2
    affected: no fix planned “Will not fix”

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

2.55% chance of exploitation in the next 30 days, higher than 85% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P
GitHub 3.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected packages

ecosystem package affected fixed in
pypi pysaml2
<4.5.0
4.5.0

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.