Security Advisory

CVE-2016-4464

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-09-21 18:00:00

Last updated 2024-08-06 00:32:25

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

The application plugins in Apache CXF Fediz 1.2.x before 1.2.3 and 1.3.x before 1.3.1 do not match SAML AudienceRestriction values against configured audience URIs, which might allow remote attackers to have bypass intended restrictions and have unspecified other impact via a crafted SAML token with a trusted signature.

← Browse all CVEs View on cve.org ↗