Concept签名验证不当

CWE-347

A category in the Common Weakness Enumeration (CWE) referring to software failing to properly verify the integrity and origin of a digital signature, allowing attackers to forge or tamper with protected data.

Timeline (last 90 days)

Oct 14

This class of SAML flaws is usually categorized at the intersection of CWE-436 (Interpretation Conflict) and CWE-347 (Improper Verification of Cryptographic Signature).

Unverified50%

All Facts (1)

Unverified

This class of SAML flaws is usually categorized at the intersection of CWE-436 (Interpretation Conflict) and CWE-347 (Improper Verification of Cryptographic Signature).

50%

Source Articles

Four SAML Vulnerabilities from Report to Fix: Lessons from Signature and Identity Parsing InconsistencyOct 14