CoreWCF.Primitives vulnerabilities (NuGet)
8 vulnerabilities.
-
CoreWCF.PrimitivesNuGet CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality 7.4 High -
CoreWCF.PrimitivesNuGet CoreWCF: XML Signature Wrapping in WS-Security endorsing/supporting signature verification allows replay of captured signed messages 7.4 High -
CoreWCF.PrimitivesNuGet CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation 10.0 Critical -
CoreWCF.PrimitivesNuGet CoreWCF: SAML SubjectConfirmation methods and holder-of-key proof keys are not enforced 7.4 High -
CoreWCF.PrimitivesNuGet CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass 3.7 Low -
CoreWCF.PrimitivesNuGet CoreWCF: SAML token replay protection is inoperative 5.9 Medium -
CoreWCF.PrimitivesNuGet CoreWCF: SamlSerializer skips SignatureValue verification when SAML signing token is not an X.509 certificate 7.4 High -
CoreWCF.PrimitivesNuGet CoreWCF: WS-Security signature substitution via document-wide Signature lookup 5.9 Medium