CVE-2012-5352 Java Open Single Sign-On Project Home (JOSSO) allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack...
MediumCVSS 5.8
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Java Open Single Sign-On Project Home (JOSSO) allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| josso java open single sign-on project home | All versions | No fix listed |
References
- www.nds.rub.de
- 55892 vdb-entry
- bugzilla.redhat.com
- josso-signature-security-bypass(79241) vdb-entry