Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2018-02-27	CVE-2018-0489	Improper Verification of Cryptographic Signature vulnerability in multiple products Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via crafted XML data. network low complexity shibboleth debian arubanetworks CWE-347	6.4
2018-01-13	CVE-2018-0486	Improper Verification of Cryptographic Signature vulnerability in multiple products Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital signatures of user attribute data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via a crafted DTD. network low complexity shibboleth debian CWE-347	6.4