Openid Openid4java vulnerabilities

• kay framework project framework, openid openid4java, redhat jboss enterprise application platform +2 more OpenID4Java does not verify that Attribute Exchange (AX) information is signed CVE-2011-4314 Fix available 5.8 MediumJanuary 27, 2012