CVE:CVE-2012-5352
CNNVD:CNNVD-201210-145
Java Open Single Sign-On Project Home (JOSSO)中存在漏洞。远程攻击者可利用该漏洞通过缺少签名元素的SAML声明，伪造消息并绕过身份验证，又名‘签名排除攻击’。
solution:Upgrade josso java_open_single_sign-on_project_home to a higher version than -