Shibboleth Shibboleth-Identity-Provider vulnerabilities

1 known vulnerability affecting shibboleth/shibboleth-identity-provider.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2011-1411MEDIUMCVSS 5.8≤ 2.3.1v2.0.0+9 more2011-09-02
CVE-2011-1411 [MEDIUM] CWE-287 CVE-2011-1411: Shibboleth OpenSAML library 2.4.x before 2.4.3 and 2.5.x before 2.5.1, and IdP before 2.3.2, allows Shibboleth OpenSAML library 2.4.x before 2.4.3 and 2.5.x before 2.5.1, and IdP before 2.3.2, allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."
nvd