Skip to content
OpenAdvisories

Package · Maven

org.openid4java:openid4java

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2011-4314

    OpenID4Java does not verify that Attribute Exchange (AX) information is signed

    message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly other products does not verify that Attribute Exchange (AX) information is signed, …

    org.openid4java:openid4java openid4java Debian Maven