CVE-2017-16853

Name of the Vulnerable Software and Affected Versions OpenSAML versions prior to 2.6.1

Description The issue arises from the DynamicMetadataProvider class in OpenSAML-C, which fails to properly configure itself with the MetadataFilter plugins. This failure leads to a lack of critical security checks, including signature verification and enforcement of validity periods. These checks are crucial for secure deployments.

Recommendations For versions prior to 2.6.1, update to version 2.6.1 or later to resolve the issue.