# Contentful: SAML vulnerability update (CVE-2017-11428)

> Contentful status incident “SAML vulnerability update (CVE-2017-11428)” on 2018-02-28: impact none (vendor’s label), 0 min, 1 update(s). Archived by Rewindex.

Canonical: https://rewindex.com/company/contentful/incidents/wfggcsm90tx0
Last updated: 2018-02-28T10:36:00Z

- Impact (vendor’s label): none
- Status: resolved
- Started: 2018-02-28 10:36 UTC · Resolved: 2018-02-28 10:36 UTC · Duration: 0 min
- Updates: 1
- [Vendor status page: https://www.contentfulstatus.com/incidents/wfggcsm90tx0](https://www.contentfulstatus.com/incidents/wfggcsm90tx0)
- [Company: Contentful](https://rewindex.com/company/contentful.md)

## Timeline of updates

- **resolved** 2018-02-28 10:36 UTC: A security vulnerability was found in the way Single Sign-On works when using SAML (Security Assertion Markup Language) \[1\] and was responsibly disclosed on Tuesday February 27th 2018. This affected a Ruby gem used by our application where it was assigned the CVE entry CVE-2017-11428. This dependency has been patched and made available by the maintainer on the same day \[2\]. Our Engineers quickly identified the threat and applied the fix to our platform. Therefore, our customers are not affected by this vulnerability as of 08:00 UTC February 28th 2018. Feel free to reach out to our Security Team and Support Team with any questions that might arise through support@contentful.com. \[1\] https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations \[2\] https://github.com/onelogin/ruby-saml

_From the vendor’s published history: only the final update text is available for incidents before Rewindex began polling this page._

## Cite this

Status incident (vendor impact label: none) posted by Contentful, started 2018-02-28 10:36 UTC, resolved after 0 min, 1 update(s).

- Canonical URL: https://rewindex.com/company/contentful/incidents/wfggcsm90tx0
- Citation: Contentful, “SAML vulnerability update (CVE-2017-11428)” (2018-02-28 10:36 UTC). Archived by Rewindex: https://rewindex.com/company/contentful/incidents/wfggcsm90tx0 (CC BY 4.0).
- Markdown link: `[Contentful: SAML vulnerability update (CVE-2017-11428) (2018-02-28)](https://rewindex.com/company/contentful/incidents/wfggcsm90tx0)`


---
Canonical: https://rewindex.com/company/contentful/incidents/wfggcsm90tx0 · Markdown: https://rewindex.com/company/contentful/incidents/wfggcsm90tx0.md · JSON: https://rewindex.com/api/v1/companies/contentful/incidents/wfggcsm90tx0 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T16:39:53.007Z