VULNERABILITY INTELLIGENCE
CVE-2011-1411
CVSS score5.8 MEDIUM
EPSS probability2.29%
CISA KEVNot currently listed
Published2011-09-02
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:N
Description
Shibboleth OpenSAML library 2.4.x before 2.4.3 and 2.5.x before 2.5.1, and IdP before 2.3.2, allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."
Weakness classification
- CWE-287: Improper Authentication