Skip to content
OpenAdvisories

Package · Debian

openid4java

1 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Feed

  • Medium —
    CVE-2011-4314

    OpenID4Java does not verify that Attribute Exchange (AX) information is signed

    message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly other products does not verify that Attribute Exchange (AX) information is signed, …

    org.openid4java:openid4java openid4java Debian Maven