Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital signatures of user attribute data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via a crafted DTD.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: debian
Published: 2018-01-13T18:00:00
Updated: 2024-08-05T03:28:11.047Z
Reserved: 2017-11-27T00:00:00
Link: CVE-2018-0486
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-01-13T18:29:00.207
Modified: 2024-11-21T03:38:19.963
Link: CVE-2018-0486
Redhat