Read the docs
Red Hat Security Advisory

RHSA-2016:0321

Red Hat JBoss Fuse 6.2.1 update

Released 2016-02-29 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

Priority LOW 27

The SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote authenticated users to bypass authentication via a crafted SAML response with a valid signed assertion, relate…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.05696 Published 2015-11-18 Partial fix · 2.7.18, 3.0.7 +1 CWE-264