Shibboleth

Records20All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Shibboleth records in CISA KEV

No Shibboleth vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Service Provider 7 records HIGH Identity Provider 3 records LOW Opensaml 3 records LOW Opensaml Java 2 records LOW Xmltooling-c 2 records LOW Oidc Op 1 record MEDIUM Shibboleth-identity-provider 1 record LOW Shibboleth-sp 1 record LOW

Records

1 record in Shibboleth-identity-provider · all components

TI-2011-01235 CVE-2011-1411 · GHSA-qwwj-qj3f-9hv7

Shibboleth OpenSAML library 2.4.x before 2.4.3 and 2.5.x before 2.5.1, and IdP before…

LOW 30

Shibboleth OpenSAML library 2.4.x before 2.4.3 and 2.5.x before 2.5.1, and IdP before 2.3.2, allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.02291 Published 2011-09-02 Fixed in 2.4.3, 2.5.1 CWE-287

Open these records in search →

Critical	1
High	9
Medium	10
Low	0
No CVSS	0