High severity · published Dec 27, 2017
CVE-2017-16897
A vulnerability has been discovered in the Auth0 passport-wsfed-saml2 library affecting versions < 3.0.5
8.1
CVSS
1.4%
EPSS
No
On KEV
Description
A vulnerability has been discovered in the Auth0 passport-wsfed-saml2 library affecting versions < 3.0.5. This vulnerability allows an attacker to impersonate another user and potentially elevate their privileges if the SAML identity provider does not sign the full SAML response (e.g., only signs the assertion within the response).
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PA
Passport-wsfed-saml2 · Auth0
before 3.0.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-16897
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-16897
Vendor Advisory
https://auth0.com/docs/security/bulletins/cve-2017-16897
More from Passport-wsfed-saml2
9.3
CVE-2025-46572
passport-wsfed-saml2 Has SAML Authentication Bypass via Signature Wrapping
8.6
CVE-2025-46573
passport-wsfed-saml2 Has SAML Authentication Bypass via Attribute Smuggling
7.5
CVE-2022-23505
Passport-wsfed-saml2 vulnerable to Authentication Bypass for WSFed authentication