Researchers
Back
Meiko Jensen
#23838
of 60,401
12.3
Total CVSS
Vulnerabilities
·
2
Medium
2
PT-2011-3107
2011-09-02
5.8
CVE-2011-1411
Shibboleth
Shibboleth Idp
The issue allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."
PT-2011-3777
2011-06-02
6.5
CVE-2011-2329
Apache
Apache Rampart/C
The issue is related to the improper calculation of the expiration of timestamp tokens by the `rampart timestamp token validate` function. This allows remote attackers to bypass intended access restrictions by using an expired token.