[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhNLWP4-uyJEyBHlTe780Aa-4cenizdB1KO8uyyZEcXo":3,"g5a-risk:CVE-2009-3474":209},{"success":4,"data":5,"meta":207},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":82,"references":83,"referencesCount":136,"weaknesses":137,"weaknessesCount":141,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":142,"seoMetadata":143,"configurations":168,"relatedVendorCves":205,"notableEvents":206},"CVE-2009-3474","What is CVE-2009-3474?","OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by Internet2 Shibboleth Service Provider 2.x before 2.2.1, do not follow the KeyDescriptor element's Use attribute, which allows remote attackers to use a certificate for both signing and encryption when it is designated for just one purpose, potentially weakening the intended security application of the certificate.","OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by Internet2 Shibboleth Service Provider 2.x before 2.2.1, do not follow the KeyDescriptor...","2009-09-29T23:30:00.217","2026-06-16T23:11:40.58",7.5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","PARTIAL","",null,"HIGH",10,6.4,false,[],0.01544,[34,34,34,34,34,34,34],"High",[38,42,45,48,52,55,58,61,65,68,71,74,76,79],{"vendor":39,"product":40,"version":22,"criteria":41,"vulnerable":4},"internet2","opensaml","cpe:2.3:a:internet2:opensaml:2.0:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":43,"criteria":44,"vulnerable":4},"2.1.0","cpe:2.3:a:internet2:opensaml:2.1.0:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":46,"criteria":47,"vulnerable":4},"2.2.0","cpe:2.3:a:internet2:opensaml:2.2.0:*:*:*:*:*:*:*",{"vendor":39,"product":49,"version":50,"criteria":51,"vulnerable":4},"xmltooling","1.0.1","cpe:2.3:a:internet2:xmltooling:1.0.1:*:*:*:*:*:*:*",{"vendor":39,"product":49,"version":53,"criteria":54,"vulnerable":4},"1.1.0","cpe:2.3:a:internet2:xmltooling:1.1.0:*:*:*:*:*:*:*",{"vendor":39,"product":49,"version":56,"criteria":57,"vulnerable":4},"1.1.1","cpe:2.3:a:internet2:xmltooling:1.1.1:*:*:*:*:*:*:*",{"vendor":39,"product":49,"version":59,"criteria":60,"vulnerable":4},"1.2.0","cpe:2.3:a:internet2:xmltooling:1.2.0:*:*:*:*:*:*:*",{"vendor":39,"product":62,"version":63,"criteria":64,"vulnerable":4},"shibboleth-sp","1.3.1","cpe:2.3:a:internet2:shibboleth-sp:1.3.1:*:*:*:*:*:*:*",{"vendor":39,"product":62,"version":66,"criteria":67,"vulnerable":4},"1.3.2","cpe:2.3:a:internet2:shibboleth-sp:1.3.2:*:*:*:*:*:*:*",{"vendor":39,"product":62,"version":69,"criteria":70,"vulnerable":4},"1.3b","cpe:2.3:a:internet2:shibboleth-sp:1.3b:*:*:*:*:*:*:*",{"vendor":39,"product":62,"version":72,"criteria":73,"vulnerable":4},"1.3f","cpe:2.3:a:internet2:shibboleth-sp:1.3f:*:*:*:*:*:*:*",{"vendor":39,"product":62,"version":22,"criteria":75,"vulnerable":4},"cpe:2.3:a:internet2:shibboleth-sp:2.0:*:*:*:*:*:*:*",{"vendor":39,"product":62,"version":77,"criteria":78,"vulnerable":4},"2.1","cpe:2.3:a:internet2:shibboleth-sp:2.1:*:*:*:*:*:*:*",{"vendor":39,"product":62,"version":80,"criteria":81,"vulnerable":4},"2.2","cpe:2.3:a:internet2:shibboleth-sp:2.2:*:*:*:*:*:*:*",14,[84,89,92,95,100,104,107,111,114,118,120,122,124,126,128,130,132,134],{"url":85,"source":86,"tags":87},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F36855","Secunia",[88],"Vendor Advisory",{"url":90,"source":86,"tags":91},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F36868",[88],{"url":93,"source":86,"tags":94},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F36876",[88],{"url":96,"source":97,"tags":98},"http:\u002F\u002Fshibboleth.internet2.edu\u002Fsecadv\u002Fsecadv_20090817a.txt","Internet2",[99,88],"Patch",{"url":101,"source":102,"tags":103},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2009\u002Fdsa-1895","Debian",[99],{"url":105,"source":102,"tags":106},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2009\u002Fdsa-1896",[99],{"url":108,"source":109,"tags":110},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F36516","Securityfocus",[99],{"url":112,"source":97,"tags":113},"https:\u002F\u002Fbugs.internet2.edu\u002Fjira\u002Fbrowse\u002FCPPOST-28",[],{"url":115,"source":116,"tags":117},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F53474","Ibmcloud",[],{"url":85,"source":86,"tags":119},[88],{"url":90,"source":86,"tags":121},[88],{"url":93,"source":86,"tags":123},[88],{"url":96,"source":97,"tags":125},[99,88],{"url":101,"source":102,"tags":127},[99],{"url":105,"source":102,"tags":129},[99],{"url":108,"source":109,"tags":131},[99],{"url":112,"source":97,"tags":133},[],{"url":115,"source":116,"tags":135},[],18,[138],{"id":139,"name":139,"description":140},"Unknown","CWE-310",1,[],{"title":144,"metaDescription":145,"keywords":146,"canonicalUrl":147,"structuredData":148},"What is CVE-2009-3474? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2009-3474, a high severity cyber security vulnerability from 2009. OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, a...","CVE-2009-3474, CVE-2009-3474 vulnerability, CVE-2009-3474 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2009, CVSS score, exploit, patch, remediation, internet2 security, opensaml vulnerability, xmltooling vulnerability, shibboleth-sp vulnerability","\u002Fwhat-is\u002Fcve-2009-3474",{"@context":149,"@type":150,"headline":144,"description":145,"datePublished":10,"dateModified":11,"author":151,"publisher":155,"about":159,"mainEntityOfPage":163,"articleSection":166,"keywords":167},"https:\u002F\u002Fschema.org","TechArticle",{"@type":152,"name":153,"url":154},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":152,"name":153,"url":154,"logo":156},{"@type":157,"url":158},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":160,"name":6,"description":161,"additionalType":162},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":164,"@id":165},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2009-3474","Cybersecurity","CVE-2009-3474, CVE-2009-3474 vulnerability, CVE-2009-3474 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[169],{"Operator":170,"Negate":28,"Nodes":171},"AND",[172,189],{"Operator":173,"Negate":32,"CPEMatch":174},"OR",[175,177,179,181,183,185,187],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":176,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"258372E2-533F-46CB-B25A-5ECB3CC2F22F",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":178,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"1122AD73-8FDD-4387-A237-B493CE0D547E",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":180,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"0192C838-FD63-4CF7-9BF0-9BAFF101C612",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":182,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"B2D36F93-B9DE-422C-AD73-3D8AA58DB6BE",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":184,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"F5FCBF08-0DD9-4899-B4F5-5D7BFB0B5830",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":186,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"5457FF44-CB80-486B-B3B2-D40F34565976",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":188,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"5C3A371A-AF3E-44E5-8854-C5D61FF5660C",{"Operator":173,"Negate":32,"CPEMatch":190},[191,193,195,197,199,201,203],{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":192,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"CE02AD93-8ED6-46F1-81D8-B70CB9EB79BF",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":194,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"A6CF3BEC-262B-4901-8D73-D8BB1869A166",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":196,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"C6EE490F-9E85-44F9-9608-86D4FBDAD331",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":198,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"4515685C-B170-4829-9261-8FAD5C9F1874",{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":200,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"8FC9CB94-188C-4BE2-AD8E-EBBA5BA3731E",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":202,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"B9E3DA80-673A-47D7-BDE2-0AC112BB6C4C",{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":204,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"673CCD0B-9202-4EBA-96B2-11A438E8D464",[],[],{"lastModified":11,"cacheTime":208,"version":22},1792446610308,{"score":210,"band":211,"action":212,"scoredAt":213},46,"Medium","Plan remediation","2026-10-19T06:38:19.830937+00:00"]