Lucene search

CVE-2012-5353

🗓️ 09 Oct 2012 23:05:55Reported by mitreType

Eduserv OpenAthens SP 2.0 for Java allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack.

Reporter	Title	Published	Views	Family All 3
Cvelist	CVE-2012-5353	9 Oct 201223:00	–	cvelist
Prion	Authentication flaw	9 Oct 201223:55	–	prion
NVD	CVE-2012-5353	9 Oct 201223:55	–	nvd

Nvd

Node

eduserv openathens_service_providerMatch2.0-java

Source	Link
nds	www.nds.rub.de/media/nds/veroeffentlichungen/2012/08/22/BreakingSAML_3.pdf
status	www.status.openathens.net/adv.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 Oct 2012 23:55Current

7.2High risk

Vulners AI Score7.2

CVSS25.8

EPSS0.00155

CWE-287

eduserv openathens sp 2.0 java remote attackers authentication bypass saml assertion signature exclusion attack cve-2012-5353 nvd