SH
Product
Shibboleth-sp
3
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Shibboleth-sp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-3476 | – | Sep 29 | Buffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibboleth Service Provider software 1.3.x before 1.3.4, and XMLTooling before 1.2.2 as used in Internet2 Shibboleth… Affected: 1.3.1; 1.3.2; 1.3.3; 1.3f; 2.0; 2.1; +1 more |
| CVE-2009-3475 | – | Sep 29 | Internet2 Shibboleth Service Provider software 1.3.x before 1.3.3 and 2.x before 2.2.1, when using PKIX trust validation, does not properly handle a '\0' character in the subject… Affected: 1.3.1; 1.3.2; 1.3f; 2.0; 2.1; 2.2 |
| CVE-2009-3474 | – | Sep 29 | OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by Internet2 Shibboleth Service Provider 2.x before 2.2.1, do not follow the KeyDescriptor element's Use… Affected: 1.3.1; 1.3.2; 1.3b; 1.3f; 2.0; 2.1; +1 more |
Showing 3