4 matches found
CVE-2012-5353
Eduserv OpenAthens SP 2.0 for Java allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack."...
Authentication flaw
Eduserv OpenAthens SP 2.0 for Java allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack."...
CVE-2012-5353
CVE-2012-5353 affects Eduserv OpenAthens SP 2.0 for Java. The vulnerability arises when a SAML assertion lacks a Signature element, enabling remote attackers to forge messages and bypass authentication (a “Signature exclusion attack”). The issue is documented across multiple sources (NVD entry an...
