CVE-2015-5253 in CXF
Summary
The SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote authenticated users to bypass authentication via a crafted SAML response with a valid signed assertion, related to a "wrapping attack."
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
07/01/2015
Disclosure
11/18/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 79244 | Apache CXF SAML Web SSO access control | 264 | Not defined | Official fix | CVE-2015-5253 |