PT-2012-5948

Name of the Vulnerable Software and Affected Versions Eduserv OpenAthens SP version 2.0 for Java Description The issue allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, also known as a "Signature exclusion attack"...