https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:16:09 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-116789 EUVD-2026-116789 https://cve.radiocsirt.org/vuln/euvd-2026-116789 https://cve.radiocsirt.org/vuln/fkie_cve-2011-4314 <p>message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly other products does not verify that Attribute Exchange (AX) information is signed, which allows remote attackers to modify potentially sensitive AX information without detection via a man-in-the-middle (MITM) attack.</p> <p>message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly other products does not verify that Attribute Exchange (AX) information is signed, which allows remote attackers to modify potentially sensitive AX information without detection via a man-in-the-middle (MITM) attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-4314 https://cve.radiocsirt.org/vuln/ghsa-j473-c3rr-rx9p <p><strong>Affected:</strong> Maven: org.openid4java:openid4java</p> <p>message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly other products does not verify that Attribute Exchange (AX) information is signed, which allows remote attackers to modify potentially sensitive AX information without detection via a man-in-the-middle (MITM) attack.</p> <p><strong>Affected:</strong> Maven: org.openid4java:openid4java</p> <p>message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly other products does not verify that Attribute Exchange (AX) information is signed, which allows remote attackers to modify potentially sensitive AX information without detection via a man-in-the-middle (MITM) attack.</p> https://cve.radiocsirt.org/vuln/ghsa-j473-c3rr-rx9p https://cve.radiocsirt.org/vuln/gsd-2011-4314 gsd-2011-4314 https://cve.radiocsirt.org/vuln/gsd-2011-4314 https://cve.radiocsirt.org/vuln/rhsa-2011:1798 <p>Invoker servlets authentication bypass (HTTP verb tampering) extension): MITM due to improper validation of AX attribute signatures</p> <p>Invoker servlets authentication bypass (HTTP verb tampering) extension): MITM due to improper validation of AX attribute signatures</p> https://cve.radiocsirt.org/vuln/rhsa-2011:1798