Skip to content

CVE-2012-5353 Eduserv OpenAthens SP 2.0 for Java allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack."

MediumCVSS 5.8 EPSS 2.2%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Eduserv OpenAthens SP 2.0 for Java allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack."

Affected products

ProductAffected versionsFixed in
eduserv openathens service provider = 2.0 No fix listed

References