Information Disclosure

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. The (1) Htpasswd authentication source in the authcrypt module and (2) SimpleSAML_Session class in SimpleSAMLphp 1.14.11 and earlier allow remote attackers to conduct timing side-…CVE-2017-12872Simplesamlphp · 1.5% likely

   CWE-200

2. The sanitycheck module in SimpleSAMLphp before 1.14.1 allows remote attackers to learn the PHP version on the system via unspecified vectors.CVE-2016-3124Simplesamlphp · 1.3% likely

   CWE-200

3. Information disclosure of source code in SimpleSAMLphpCVE-2020-5301simplesamlphp · CVSS 3 · 0.9% likely

   CWE-200

4. SimpleSAMLphp 1.14.12 and earlier make it easier for man-in-the-middle attackers to obtain sensitive information by leveraging use of the aesEncrypt and aesDecrypt methods in the…CVE-2017-12870Simplesamlphp · 0.9% likely

   CWE-200

5. Log injection in SimpleSAMLphpCVE-2020-5225simplesamlphp · CVSS 4.4 · 0.7% likely

   CWE-532

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.