{"action":"Upgrade org.opensaml:opensaml to 2.4.3 (2.4.x) or 2.5.1 (2.5.x) or later.","affected":[{"fixed":"2.4.3","introduced":"2.4.0"},{"fixed":"2.5.1","introduced":"2.5.0"}],"component":"org.opensaml:opensaml","cve_ids":["CVE-2011-1411"],"ecosystem":"Maven","epss":0.02291,"exploited":false,"fixed_versions":["2.4.3","2.5.1"],"ghsa_id":"GHSA-qwwj-qj3f-9hv7","id":"tcs_01M5N9AF1K020KVR2E27Z4Z7NZ","modified_at":"2024-12-07T05:39:37.210445Z","published_at":"2022-05-17T05:02:41Z","references":["https://osv.dev/vulnerability/GHSA-qwwj-qj3f-9hv7","https://nvd.nist.gov/vuln/detail/CVE-2011-1411","http://shibboleth.internet2.edu/secadv/secadv_20110725.txt","http://www.debian.org/security/2011/dsa-2284","http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-qwwj-qj3f-9hv7","url":"https://osv.dev/vulnerability/GHSA-qwwj-qj3f-9hv7"}],"summary":"Improper Authentication in OpenSAML"}