CVE-2012-5352

EUVD-2012-5273
Java Open Single Sign-On Project Home (JOSSO) allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack."
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 45%
Affected Products (NVD)
VendorProductVersion
jossojava_open_single_sign-on_project_home
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.nds.rub.de/media/nds/veroeffentlichungen/2012/08/22/BreakingSAML_3.pdf
http://www.securityfocus.com/bid/55892
https://bugzilla.redhat.com/show_bug.cgi?id=865169
https://exchange.xforce.ibmcloud.com/vulnerabilities/79241
http://www.nds.rub.de/media/nds/veroeffentlichungen/2012/08/22/BreakingSAML_3.pdf
http://www.securityfocus.com/bid/55892
https://bugzilla.redhat.com/show_bug.cgi?id=865169
https://exchange.xforce.ibmcloud.com/vulnerabilities/79241