CVE

Id
52226  
CVE No.
CVE-2011-4314  
Status
Candidate  
Description
message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly other products does not verify that Attribute Exchange (AX) information is signed, which allows remote attackers to modify potentially sensitive AX information without detection via a man-in-the-middle (MITM) attack.  
Phase
Assigned (20111104)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
558022 52226 CVE-2011-4314 MLIST:[oss-security] 20111116 CVE Request: openid4java not properly verifying the signature of Attribute Exchange (AX) information  View
558023 52226 CVE-2011-4314 URL:http://www.openwall.com/lists/oss-security/2011/11/16/1  View
558024 52226 CVE-2011-4314 MLIST:[oss-security] 20111116 Re: CVE Request: openid4java not properly verifying the signature of Attribute Exchange (AX) information  View
558025 52226 CVE-2011-4314 URL:http://www.openwall.com/lists/oss-security/2011/11/17/1  View
558026 52226 CVE-2011-4314 CONFIRM:http://openid.net/2011/05/05/attribute-exchange-security-alert/  View
558027 52226 CVE-2011-4314 CONFIRM:https://issues.jboss.org/browse/JBEPP-1368  View
558028 52226 CVE-2011-4314 CONFIRM:https://issues.jboss.org/browse/SOA-3597  View
558029 52226 CVE-2011-4314 REDHAT:RHSA-2011:1804  View
558030 52226 CVE-2011-4314 URL:http://www.redhat.com/support/errata/RHSA-2011-1804.html  View
558031 52226 CVE-2011-4314 REDHAT:RHSA-2012:0441  View
558032 52226 CVE-2011-4314 URL:http://rhn.redhat.com/errata/RHSA-2012-0441.html  View
558033 52226 CVE-2011-4314 REDHAT:RHSA-2012:0519  View
558034 52226 CVE-2011-4314 URL:http://rhn.redhat.com/errata/RHSA-2012-0519.html  View
558035 52226 CVE-2011-4314 SECTRACK:1026400  View
558036 52226 CVE-2011-4314 URL:http://securitytracker.com/id?1026400  View
558037 52226 CVE-2011-4314 SECUNIA:44496  View
558038 52226 CVE-2011-4314 URL:http://secunia.com/advisories/44496  View
558039 52226 CVE-2011-4314 SECUNIA:48697  View
558040 52226 CVE-2011-4314 URL:http://secunia.com/advisories/48697  View
558041 52226 CVE-2011-4314 SECUNIA:48954  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
32861 JVNDB-2011-003101 Ruby on Rails におけるクロスサイトスクリプティングの脆弱性 Ruby on Rails 上の i18n translations helper メソッドおよび rails_xss プラグインは、"html" で終わる翻訳文字列に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-4319 52226 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003101.html  View