169 matches found
PT-2012-5389
Name of the Vulnerable Software and Affected Versions Apache Axis2 affected versions not specified Description The issue allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack." Recommendations At the moment, there is no information about a newer...
Apache Axis2 XML signature-wrapping安全漏洞
Apache Axis2是Apache web services/SOAP/WDSL引擎，它是Apache SOAP项目的延续。 Apache Axis2受XML Signature Wrapping XSW攻击影响，允许攻击者利用漏洞绕过对签名请求的验证，对应用进行进一步攻击。 0 Apache Axis2 厂商解决方案 目前没有详细解决方案提供： http://ws.apache.org/axis/...
CVE-2011-1411
Shibboleth OpenSAML library 2.4.x before 2.4.3 and 2.5.x before 2.5.1, and IdP before 2.3.2, allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."...
CVE-2011-1411
Shibboleth OpenSAML library 2.4.x before 2.4.3 and 2.5.x before 2.5.1, and IdP before 2.3.2, allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."...
PT-2011-3107
Name of the Vulnerable Software and Affected Versions Shibboleth OpenSAML library versions 2.4.x through 2.4.2 Shibboleth OpenSAML library versions 2.5.x through 2.5.0 Shibboleth IdP versions prior to 2.3.2 Description The issue allows remote attackers to forge messages and bypass authentication...
CVE-2011-1411: Improper Authentication
Shibboleth OpenSAML library 2.4.x before 2.4.3 and 2.5.x before 2.5.1, and IdP before 2.3.2, allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."...
[SECURITY] [DSA 2284-1] opensaml2 security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2284-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 25, 2011 http://www.debian.org/security/faq -...
Debian DSA-2284-1 : opensaml2 - implementation error
Juraj Somorovsky, Andreas Mayer, Meiko Jensen, Florian Kohlar, Marco Kampmann and Joerg Schwenk discovered that Shibboleth, a federated web single sign-on system is vulnerable to XML signature wrapping attacks. More details can be found in the Shibboleth advisory. %NASLMINLEVEL 70300 C Tenable...
