tocsin

CVE-2015-1796

2 advisories.

Maven/org.opensaml:opensaml CVE-2015-1796: medium, EPSS 1.25%

Improper Certificate Validation in Shibboleth Identity Provider and OpenSAML

Action: Upgrade org.opensaml:opensaml to 2.6.5 or later.

Affected

introducedfixedlast affected
02.6.5-

Fixed versions

2.6.5

Sources

CVE-2015-1796 · published · modified · JSON

Maven/edu.internet2.middleware:shibboleth-identityprovider CVE-2015-1796: medium, EPSS 1.25%

Improper Certificate Validation in Shibboleth Identity Provider and OpenSAML

Action: Upgrade edu.internet2.middleware:shibboleth-identityprovider to 2.4.4 or later.

Affected

introducedfixedlast affected
02.4.4-

Fixed versions

2.4.4

Sources

CVE-2015-1796 · published · modified · JSON