Product · Shibboleth; OpenSAML Java

Identity Provider (IdP)

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.9

CVE-2014-3603

Improper Validation of Certificate with Host Mismatch in Shibboleth Identity Provider and OpenSAML Java

The (1) HttpResource and (2) FileBackedHttpResource implementations in Shibboleth Identity Provider (IdP) before 2.4.1 and OpenSAML Java 2.6.2 do not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName fie…

Shibboleth; OpenSAML Java OpenSAML Java Identity Provider (IdP) org.opensaml:opensaml Maven

Apr 4, 2019