CVE-2012-5353 | BDVDB-2026-52946 Detail

Description#

Eduserv OpenAthens SP 2.0 for Java allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack."

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12012-10-09Record published in the CVE List.
2. Version 22024-08-06Most recent update recorded in the CVE List.