| Package | Affected versions | Patched versions |
|---|---|---|
| openathens service provider | = 2.0 |
Eduserv OpenAthens SP 2.0 for Java allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free