Detections
Analytics
SCA: security update for simplesamlphp/simplesamlphp (GHSA-6gc6-m364-85ww)
medium Tenable Self-Hosted Container Security Plugin ID 422684
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- Log injection in SimpleSAMLphp before version 1.18.4. The www/erroreport.php script, which receives error
reports and sends them via email to the system administrator, did not properly sanitize the report
identifier obtained from the request. This allows an attacker, under specific circumstances, to inject new
log lines by manually crafting this report ID. When configured to use the file logging handler,
SimpleSAMLphp will output all its logs by appending each log line to a given file. Since the reportID
parameter received in a request sent to www/errorreport.php was not properly sanitized, it was possible to
inject newline characters into it, effectively allowing a malicious user to inject new log lines with
arbitrary content. (CVE-2020-5225)
See Also
Plugin Details
Severity: Medium
ID: 422684
Version: Revision 1.3
Type: Local
Family: SCA Checks
Published: 3/28/2025
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 2.1
Percentile: 6.91
Vendor
Vendor Severity: Low
CVSS v2
Risk Factor: Medium
Base Score: 5.5
Temporal Score: 4.1
Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:N
CVSS Score Source: CVE-2020-5225
CVSS v3
Risk Factor: Medium
Base Score: 5.4
Temporal Score: 4.7
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 1/24/2020
Vulnerability Publication Date: 1/24/2020
Reference Information
CVE: CVE-2020-5225
cwe: CWE-532