Summary
OpenSAML is prone to a security vulnerability involving XML signature wrapping.
Successful exploits may allow unauthenticated attackers to construct specially crafted messages that can be successfully verified and contain arbitrary content. This may aid in further attacks.
Solution
Updates are available. Please see the references for more information.
References
Severity
Classification
-
CVE CVE-2011-1411 -
CVSS Base Score: 5.8
AV:N/AC:M/Au:N/C:P/I:P/A:N
Related Vulnerabilities