Description
Eduserv OpenAthens SP 2.0 for Java allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack."
Unscored
CVE-2012-5353
EUVD-2012-5274GHSA-x3wq-g893-g96g
Eduserv OpenAthens SP 2.0 for Java allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Si…
Published Oct 9, 2012 · Updated Aug 6, 2024 · Assigned by mitre