CVE-2015-5253

The SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote authenticated users to bypass authentication via…

published November 18, 2015

CVSS
—
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

The SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote authenticated users to bypass authentication via a crafted SAML response with a valid signed assertion, related to a "wrapping attack."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05696 · 93.0th percentile
Published
2015-11-18T16:00Z
EPSS history
Timeline
  • 18 NOV 16:00Z
    The SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote authenticated users to bypass authentication via…
    cvelistv5