PT-2012-5946

Name of the Vulnerable Software and Affected Versions Apache Axis2 affected versions not specified Description The issue allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, also known as a "Signature exclusion attack"...

CVE-2012-5353: Improper Authentication

Eduserv OpenAthens SP 2.0 for Java allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack."...

PT-2012-5947

Name of the Vulnerable Software and Affected Versions Java Open Single Sign-On Project Home JOSSO affected versions not specified Description The issue allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, also known as a "Signatu...