GCVE - cpe:2.3:a:kay_framework_project:kay

Approved changes feed: RSS · Atom

cpe:2.3:a:kay_framework_project:kay_framework:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Kay Framework Project (`0a6232b1-f20e-5fc7-95fd-37b6af43b21c`)
Product	Kay Framework (`d8e14e65-3dc0-5032-ba89-572caef0828c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/ianlewis/kay`	purl2cpe	2026-06-01 10:10:57.817251
`pkg:github/kayframework/kay-framework`	purl2cpe	2026-06-01 10:10:57.817254

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-4314`	vulnerable	2026-06-08 04:59:30.310288	Details available message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly other products does not verify that Attribute Exchange (AX) information is signed, which allows remote attackers to modify potentially sensitive AX information without detection via a man-in-the-middle (MITM) attack. Published: 2012-01-27T15:00:00.000Z Updated: 2024-08-07T00:01:51.595Z Open on db.gcve.eu Reference links http://www.redhat.com/support/errata/RHSA-2011-1804.html http://secunia.com/advisories/44496 http://openid.net/2011/05/05/attribute-exchange-security-alert/ http://rhn.redhat.com/errata/RHSA-2012-0519.html http://secunia.com/advisories/48954	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.