Shibboleth

Opensaml

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1

CVE-2017-16853

  • EPSS 0.69%
  • Published 16.11.2017 17:29:00
  • Last modified 20.04.2025 01:37:25

The DynamicMetadataProvider class in saml/saml2/metadata/impl/DynamicMetadataProvider.cpp in OpenSAML-C in OpenSAML before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as ...

5

CVE-2013-6440

  • EPSS 0.75%
  • Published 14.02.2014 15:55:05
  • Last modified 11.04.2025 00:51:21

The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set the expandEntityReferences property to true, which allows remote attackers to conduct XML external entity (XXE)...

5.8

CVE-2011-1411

  • EPSS 0.05%
  • Published 02.09.2011 23:55:04
  • Last modified 11.04.2025 00:51:21

Shibboleth OpenSAML library 2.4.x before 2.4.3 and 2.5.x before 2.5.1, and IdP before 2.3.2, allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."