CVE:CVE-2012-5353
CNNVD:CNNVD-201210-146
Eduserv中存在漏洞。远程攻击者可利用该漏洞通过缺少签名元素的SAML声明，伪造消息并绕过身份验证，又名‘签名排除攻击’。
solution:Upgrade eduserv openathens_service_provider to a higher version than 2.0,and avoid the version 2.0