Unscored CVE-2019-18632 EUVD-2019-8355GHSA-g7vg-v5mg-xqvv

European Commission eIDAS-Node Integration Package before 2.3.1 allows Certificate Faking because an attacker can sign a manipulated SAML r…

Published Oct 30, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

European Commission eIDAS-Node Integration Package before 2.3.1 allows Certificate Faking because an attacker can sign a manipulated SAML response with a forged certificate.

References

https://sec-consult.com/en/blog/advisories/15587/