Home » Identity and Access Management: CAF » CAF Support » FIM Service Bulletins

FIM Bulletins

Security Bulletin for SAML2 Service Providers

A new flaw has been found in the XML processing performed by various SAML Service Providers. Advisory Summary The Shibboleth Service Provider software and other SAML implementations are vulnerable to forged user attribute data, which could facilitate user impersonation that ... Read More

Security Advisory for Shibboleth Service Providers

A security advisory for the Shibboleth Service Provider software was published for both Linux and Windows platforms. The Shibboleth Service Provider software is vulnerable to forged user attribute data, which could facilitate user impersonation that exposes protected information. To mitigate ... Read More

View All FIM Bulletins.