Vulnerability Name:

CVE-2011-1411 (CCN-68788)

Assigned:2011-07-25
Published:2011-07-25
Updated:2013-10-11
Summary:Shibboleth OpenSAML library 2.4.x before 2.4.3 and 2.5.x before 2.5.1, and IdP before 2.3.2, allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."
CVSS v3 Severity:7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:5.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N)
4.3 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): None
6.8 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-287
Vulnerability Consequences:Bypass Security
References:Source: MITRE
Type: CNA
CVE-2011-1411

Source: CCN
Type: SA45385
OpenSAML XML Signature Wrapping Security Bypass Vulnerability

Source: CCN
Type: SA45432
Shibboleth Identity / Service Provider OpenSAML Security Bypass Vulnerability

Source: CCN
Type: SA46001
IBM WebSphere Application Server SAML Signature Wrapping Vulnerability

Source: CCN
Type: SA50994
Oracle WebLogic Server / Event Processing OpenSAML Security Bypass Vulnerability

Source: SECUNIA
Type: UNKNOWN
50994

Source: CCN
Type: Internet2 Web site
Shibboleth System

Source: CCN
Type: Shibboleth Security Advisory [25 July 2011]
OpenSAML software is vulnerable to XML Signature wrapping attacks

Source: CONFIRM
Type: Vendor Advisory
http://shibboleth.internet2.edu/secadv/secadv_20110725.txt

Source: DEBIAN
Type: UNKNOWN
DSA-2284

Source: DEBIAN
Type: DSA-2284
opensaml2 -- implementation error

Source: CCN
Type: IBM APAR PM43254
Fix list for IBM WebSphere Application Server V7.0

Source: MANDRIVA
Type: UNKNOWN
MDVSA-2013:150

Source: CCN
Type: Oracle Web Site
Oracle Critical Patch Update Advisory - October 2012

Source: CONFIRM
Type: UNKNOWN
http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

Source: CCN
Type: OSVDB ID: 74167
OpenSAML XML Signature Wrapping Access Restriction Bypass

Source: CCN
Type: BID-48890
OpenSAML XML Signature Wrapping Security Vulnerability

Source: XF
Type: UNKNOWN
opensaml-xml-security-bypass(68788)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:shibboleth:opensaml:2.4.0:*:*:*:*:*:*:*
  • OR cpe:/a:shibboleth:opensaml:2.4.1:*:*:*:*:*:*:*
  • OR cpe:/a:shibboleth:opensaml:2.4.2:*:*:*:*:*:*:*
  • OR cpe:/a:shibboleth:opensaml:2.5.0:*:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/a:shibboleth:shibboleth-identity-provider:2.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:shibboleth:shibboleth-identity-provider:2.1.0:*:*:*:*:*:*:*
  • OR cpe:/a:shibboleth:shibboleth-identity-provider:2.1.1:*:*:*:*:*:*:*
  • OR cpe:/a:shibboleth:shibboleth-identity-provider:2.1.2:*:*:*:*:*:*:*
  • OR cpe:/a:shibboleth:shibboleth-identity-provider:2.1.3:*:*:*:*:*:*:*
  • OR cpe:/a:shibboleth:shibboleth-identity-provider:2.1.4:*:*:*:*:*:*:*
  • OR cpe:/a:shibboleth:shibboleth-identity-provider:2.1.5:*:*:*:*:*:*:*
  • OR cpe:/a:shibboleth:shibboleth-identity-provider:2.2.0:*:*:*:*:*:*:*
  • OR cpe:/a:shibboleth:shibboleth-identity-provider:2.2.1:*:*:*:*:*:*:*
  • OR cpe:/a:shibboleth:shibboleth-identity-provider:2.3.0:*:*:*:*:*:*:*
  • OR cpe:/a:shibboleth:shibboleth-identity-provider:*:*:*:*:*:*:*:* (Version <= 2.3.1)

    • Configuration CCN 1:
  • cpe:/a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:websphere_application_server:8.0:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.mitre.oval:def:12891
    P
    		DSA-2284-1 opensaml2 -- implementation error
    2014-06-23
    oval:com.ubuntu.precise:def:20111411000
    V
    		CVE-2011-1411 on Ubuntu 12.04 LTS (precise) - medium.
    2011-09-02
    BACK
    shibboleth opensaml 2.4.0
    shibboleth opensaml 2.4.1
    shibboleth opensaml 2.4.2
    shibboleth opensaml 2.5.0
    shibboleth shibboleth-identity-provider 2.0.0
    shibboleth shibboleth-identity-provider 2.1.0
    shibboleth shibboleth-identity-provider 2.1.1
    shibboleth shibboleth-identity-provider 2.1.2
    shibboleth shibboleth-identity-provider 2.1.3
    shibboleth shibboleth-identity-provider 2.1.4
    shibboleth shibboleth-identity-provider 2.1.5
    shibboleth shibboleth-identity-provider 2.2.0
    shibboleth shibboleth-identity-provider 2.2.1
    shibboleth shibboleth-identity-provider 2.3.0
    shibboleth shibboleth-identity-provider *
    ibm websphere application server 7.0
    ibm websphere application server 8.0