Description
Java Open Single Sign-On Project Home (JOSSO) allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack."
Unscored
CVE-2012-5352
EUVD-2012-5273GHSA-mfm8-x888-wxxx
Java Open Single Sign-On Project Home (JOSSO) allows remote attackers to forge messages and bypass authentication via a SAML assertion that…
Published Oct 9, 2012 · Updated Aug 6, 2024 · Assigned by mitre