CVE-2012-5353

Name of the Vulnerable Software and Affected Versions Eduserv OpenAthens SP version 2.0 for Java

Description The issue allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, also known as a "Signature exclusion attack".

Recommendations For Eduserv OpenAthens SP version 2.0 for Java, consider implementing proper validation of SAML assertions to ensure they contain a valid Signature element before processing them. As a temporary workaround, restrict access to sensitive resources that rely on SAML-based authentication until a patch is available.