Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2015-5253

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-3336-h95j-hvvf

Improper Access Control in Apache CXF The SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote authenticated users to bypass authentication via a crafted SAML response with a valid signed assertion, related to a "wrapping attack."

gitlab/maven/org.apache.cxf/cxf-core/CVE-2015-5253

Improper Access Control in Apache CXF The SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote authenticated users to bypass authentication via a crafted SAML response with a valid signed assertion, related to a "wrapping attack."

gitlab/maven/org.apache.cxf/cxf-rt-rs-security-sso-saml/CVE-2015-5253

Improper Access Control in Apache CXF The SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote authenticated users to bypass authentication via a crafted SAML response with a valid signed assertion, related to a "wrapping attack."