CVE-2015-1796
The PKIX trust engines in Shibboleth Identity Provider before 2.4.4 and OpenSAML Java (OpenSAML-J) before 2.6.5 trust candidate X.509 credentials when no trusted names are available for the entityID, which allows remote attackers to impersonate an entity via a certificate issued by a shibmd:KeyAuthority trust anchor.
| Software | From | Fixed in |
|---|---|---|
| shibboleth / identity_provider | - | 2.4.3.x |
| shibboleth / opensaml_java | - | 2.6.4.x |
org.opensaml / opensaml
|
- | 2.6.5 |
|
edu.internet2.middleware / shibboleth-identityprovider
|
- | 2.4.4 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime