HOMEVULNERABILITIESVENDORSKay Framework Project

Kay Framework ProjectCVEs & Vulnerabilities

1 CVEs affecting Kay Framework Project products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

kay framework 7
CVE-2011-4314MEDIUM

message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly other products does not verify that Attribute Exchange (AX) information is signed, which allows remote attackers to modify potentially sensitive AX information without detection via a man-in-the-middle (MITM) attack.

27 Jan 2012
5.8
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database
Kay Framework Project CVEs & Vulnerabilities — 1 Tracked