Authentication

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows attackers to conduct session fixation attac…CVE-2017-12868Simplesamlphp · 2.1% likely

   CWE-384

2. SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified other impacts by leveraging incorrect pers…CVE-2017-12873Simplesamlphp · 1.7% likely

   CWE-384

3. The SimpleSAML_Auth_TimeLimitedToken class in SimpleSAMLphp 1.14.14 and earlier allows attackers with access to a secret token to extend its validity period by manipulating the pr…CVE-2017-12867Simplesamlphp · 1.3% likely

   CWE-613

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.