br.net.woodstock.rockframework:rockframework-web (>=1.2.1 <=1.2.2), com.fluxcorp.plugins:webservice-trigger (>=1.0.2 <=1.0.3) +39 more potentially affected by CVE-2011-1411 via org.opensaml:opensaml (=2.4.1)

org.opensaml:opensaml MAVEN version =2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.opensaml:opensaml and may be impacted: - br.net.woodstock.rockframework:rockframework-web =1.2.1, =1.0.2, =2.8.0, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.4.0,...

Fedora Update for opensaml FEDORA-2011-12815

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for opensaml FEDORA-2011-12890

Check for the Version of opensaml OpenVAS Vulnerability Test Fedora Update for opensaml FEDORA-2011-12890 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for opensaml FEDORA-2011-12890

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 15 : opensaml-2.3-4.fc15 (2011-12890)

Backport of 2.4.3 patch which fixes CVE-2011-1411. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

CVE-2011-1411

CVE-2011-1411 affects Shibboleth OpenSAML libraries: OpenSAML 2.4.x before 2.4.3, 2.5.x before 2.5.1, and IdP before 2.3.2. The issue is an XML Signature Wrapping vulnerability allowing remote attackers to forge messages and bypass authentication. Practical impact described in sources is authenti...

CVE-2011-1411

Removed by vendor...

FreeBSD Ports: opensaml2

The remote host is missing an update to the system as announced in the referenced advisory. VID 9f14cb36-b6fc-11e0-a044-445c73746d79 OpenVAS Vulnerability Test $ Description: Auto generated from VID 9f14cb36-b6fc-11e0-a044-445c73746d79 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

FreeBSD Ports: opensaml2

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

[BSA-044] Security Update for opensaml2

Russ Allbery uploaded new packages for opensaml2 which fixed the following security problems: CVE-2011-1411 Juraj Somorovsky, Andreas Mayer, Meiko Jensen, Florian Kohlar, Marco Kampmann and Joerg Schwenk discovered that OpenSAML is vulnerable to an XML signature wrapping attack that could allow a...