TI-2012-04527 CVE-2012-5353 · GHSA-x3wq-g893-g96gEduserv OpenAthens SP 2.0 for Java allows remote attackers to forge messages and bypass…Priority LOW 30Eduserv OpenAthens SP 2.0 for Java allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack."CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.02154 · Published 2012-10-09 · No fix listed CWE-287
