CVE-2011-1411: Medium severity shibboleth opensaml java vulnerability
Shibboleth OpenSAML library 2.4.x before 2.4.3 and 2.5.x before 2.5.1, and IdP before 2.3.2, allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1411?
CVE-2011-1411 has been classified as a high severity vulnerability due to its ability to allow remote attackers to forge messages and bypass authentication.
How do I fix CVE-2011-1411?
To mitigate CVE-2011-1411, upgrade the Shibboleth OpenSAML library to version 2.4.3 or 2.5.1, and the Shibboleth Identity Provider to version 2.3.2 or later.
What types of attacks does CVE-2011-1411 enable?
CVE-2011-1411 enables attackers to perform XML Signature wrapping attacks, which can be used to forge authentication messages.
Which versions of Shibboleth are affected by CVE-2011-1411?
Affected versions include Shibboleth OpenSAML 2.4.x before 2.4.3, 2.5.x before 2.5.1, and IdP versions before 2.3.2.
Is CVE-2011-1411 exploitable remotely?
Yes, CVE-2011-1411 allows remote attackers to exploit the vulnerability without network restrictions.