The SimpleSAMLphp xml-security library is vulnerable to a cryptographic flaw that enables unauthenticated attackers to decrypt sensitive data or forge arbitrary ciphertexts.

The library fails to validate the authentication tag length for nodes encrypted with AES-GCM algorithms (aes-128-gcm, aes-192-gcm, or aes-256-gcm). This allows an unauthenticated attacker to recover the GHASH key, facilitating unauthorized data decryption and the ability to forge ciphertexts.

Successful exploitation poses a severe risk to data confidentiality and integrity, as attackers can bypass encryption protections on sensitive XML data. Given the CVSS score of 8.2, this vulnerability is classified as High, reflecting the potential for significant data compromise and the ability for an attacker to manipulate signed or encrypted communications without prior authentication.

Immediate Action: Upgrade the xml-security library to version 2.3.1 or 1.13.9 immediately to incorporate the required cryptographic validation logic.

Proactive Monitoring: Monitor application logs for unusual XML processing errors or high volumes of requests targeting cryptographic modules, which may indicate attempts to brute-force authentication tags.

Compensating Controls: While no direct WAF rule can fix this cryptographic flaw, ensure that all traffic is routed through encrypted tunnels and implement strict access controls to limit exposure of endpoints that process XML signatures.

Public Exploit Available: Unknown

This vulnerability represents a critical failure in the cryptographic implementation of the xml-security library, allowing for potential decryption and forgery of sensitive data. Because the vulnerability is remotely exploitable without authentication, IT administrators must prioritize the transition to the patched versions (2.3.1 or 1.13.9) across all integrated environments immediately to prevent potential data breaches.