The sanitycheck module in SimpleSAMLphp prior to 1.14.1 allows remote malicious users to learn the PHP version on the system via unspecified vectors.
simplesamlphp simplesamlphp