CVE-2012-5352
JOSSO - Auth Bypass
Title source: llmDescription
Java Open Single Sign-On Project Home (JOSSO) allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack."
References (4)
Scores
EPSS
0.0023
EPSS Percentile
45.8%
Classification
CWE
CWE-287
Status
draft
Affected Products (1)
josso/java_open_single_sign-on_project_home
Timeline
Published
Oct 09, 2012
Tracked Since
Feb 18, 2026