Pesquisadores
Voltar
Meiko Jensen
#23838
de 60,401
12.3
CVSS total
Vulnerabilidades
·
2
Média
2
PT-2011-3107
2011-09-02
5.8
CVE-2011-1411
Shibboleth
Shibboleth Idp
The issue allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."
PT-2011-3777
2011-06-02
6.5
CVE-2011-2329
Apache
Apache Rampart/C
The issue is related to the improper calculation of the expiration of timestamp tokens by the `rampart timestamp token validate` function. This allows remote attackers to bypass intended access restrictions by using an expired token.