Security Advisory

CVE-2015-5253

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-11-18 16:00:00

Last updated 2024-08-06 06:41:09

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

The SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote authenticated users to bypass authentication via a crafted SAML response with a valid signed assertion, related to a "wrapping attack."

← Browse all CVEs View on cve.org ↗