CVE-2011-1411

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.29%

Published

Sep 2, 2011

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Shibboleth OpenSAML library 2.4.x before 2.4.3 and 2.5.x before 2.5.1, and IdP before 2.3.2, allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."

Weaknesses (CWE)

CWE-287

Affected Products (15)

shibboleth · opensamlvulnerable

shibboleth · shibboleth-identity-providervulnerable

References (10)

http://secunia.com/advisories/50994

http://shibboleth.internet2.edu/secadv/secadv_20110725.txt

Vendor Advisory

http://www.debian.org/security/2011/dsa-2284

http://www.mandriva.com/security/advisories?name=MDVSA-2013:150

http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

http://secunia.com/advisories/50994

http://shibboleth.internet2.edu/secadv/secadv_20110725.txt

Vendor Advisory

http://www.debian.org/security/2011/dsa-2284

KEV Catalog EPSS Scores Vendors All CVEs