[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDvnbzgE7OI9EXUarp9GsRIg_MHi7b6Q-vZuSAiepWL8":3,"g5a-risk:CVE-2015-1796":119},{"success":4,"data":5,"meta":117},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":28,"epssPercentile":15,"epssTimeSeries":29,"severity":30,"affectedProducts":31,"affectedProductsCount":40,"references":41,"referencesCount":66,"weaknesses":67,"weaknessesCount":71,"isActivelyExploited":72,"cisaInfo":15,"otxData":15,"relatedBlogPosts":73,"seoMetadata":74,"configurations":99,"relatedVendorCves":115,"notableEvents":116},"CVE-2015-1796","What is CVE-2015-1796?","The PKIX trust engines in Shibboleth Identity Provider before 2.4.4 and OpenSAML Java (OpenSAML-J) before 2.6.5 trust candidate X.509 credentials when no trusted names are available for the entityID, which allows remote attackers to impersonate an entity via a certificate issued by a shibmd:KeyAuthority trust anchor.","The PKIX trust engines in Shibboleth Identity Provider before 2.4.4 and OpenSAML Java (OpenSAML-J) before 2.6.5 trust candidate X.509 credentials when no tru...","2015-07-08T15:59:02.897","2025-04-12T10:46:40.837",4.3,"AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:P\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":23,"ExploitabilityScore":26,"ImpactScore":27,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":25,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","MEDIUM","NONE","PARTIAL",8.6,2.9,0.01256,[28,28,28,28,28,28,28],"Medium",[32,37],{"vendor":33,"product":34,"version":35,"criteria":36,"vulnerable":4},"shibboleth","identity_provider","*","cpe:2.3:a:shibboleth:identity_provider:*:*:*:*:*:*:*:*",{"vendor":33,"product":38,"version":35,"criteria":39,"vulnerable":4},"opensaml_java","cpe:2.3:a:shibboleth:opensaml_java:*:*:*:*:*:*:*:*",2,[42,46,49,53,58,60,62,64],{"url":43,"source":44,"tags":45},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-1176.html","Red Hat",[],{"url":47,"source":44,"tags":48},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-1177.html",[],{"url":50,"source":51,"tags":52},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F75370","Securityfocus",[],{"url":54,"source":55,"tags":56},"https:\u002F\u002Fshibboleth.net\u002Fcommunity\u002Fadvisories\u002Fsecadv_20150225.txt","Shibboleth",[57],"Vendor Advisory",{"url":43,"source":44,"tags":59},[],{"url":47,"source":44,"tags":61},[],{"url":50,"source":51,"tags":63},[],{"url":54,"source":55,"tags":65},[57],8,[68],{"id":69,"name":69,"description":70},"Unknown","CWE-254",1,false,[],{"title":75,"metaDescription":76,"keywords":77,"canonicalUrl":78,"structuredData":79},"What is CVE-2015-1796? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2015-1796, a medium severity cyber security vulnerability from 2015. The PKIX trust engines in Shibboleth Identity Provider bef...","CVE-2015-1796, CVE-2015-1796 vulnerability, CVE-2015-1796 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2015, CVSS score, exploit, patch, remediation, shibboleth security, identity_provider vulnerability, opensaml_java vulnerability","\u002Fwhat-is\u002Fcve-2015-1796",{"@context":80,"@type":81,"headline":75,"description":76,"datePublished":10,"dateModified":11,"author":82,"publisher":86,"about":90,"mainEntityOfPage":94,"articleSection":97,"keywords":98},"https:\u002F\u002Fschema.org","TechArticle",{"@type":83,"name":84,"url":85},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":83,"name":84,"url":85,"logo":87},{"@type":88,"url":89},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":91,"name":6,"description":92,"additionalType":93},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":95,"@id":96},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2015-1796","Cybersecurity","CVE-2015-1796, CVE-2015-1796 vulnerability, CVE-2015-1796 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[100,108],{"Operator":15,"Negate":15,"Nodes":101},[102],{"Operator":103,"Negate":15,"CPEMatch":104},"OR",[105],{"Vulnerable":4,"Criteria":36,"MatchCriteriaID":106,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":107},"55BF0DB9-3D2D-4211-A889-EEBF781B0FDB","2.4.3",{"Operator":15,"Negate":15,"Nodes":109},[110],{"Operator":103,"Negate":15,"CPEMatch":111},[112],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":113,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":114},"06CC5F7F-A65B-4779-84C5-3E2CFA5B56FE","2.6.4",[],[],{"lastModified":11,"cacheTime":118,"version":21},1792443152783,{"score":120,"band":121,"action":122,"scoredAt":123},18,"Info","Track","2026-10-19T06:45:53.521063+00:00"]