GCVE-110-CERTCC-2009-466161

Advisory Published

Vulnetix · Advisory published July 14, 2009

The XML Signature specification allows for HMAC truncation, which may allow a remote attacker to bypass authentication.

Download JSON Open in Console

Risk Scores

certcc-cam

impact8population5exploitation0widely_known17score_current8.16ease_of_exploitation17

certcc-vrda

d1_impact2d1_population4d1_direct_report1

Aliases

CVE-2009-0217

References

XML signature HMAC truncation authentication bypass

url

XML signature HMAC truncation authentication bypass

url

XML signature HMAC truncation authentication bypass

url

XML signature HMAC truncation authentication bypass

url

XML signature HMAC truncation authentication bypass

url

XML signature HMAC truncation authentication bypass

url

XML signature HMAC truncation authentication bypass

url

XML signature HMAC truncation authentication bypass

url

XML signature HMAC truncation authentication bypass

url

XML signature HMAC truncation authentication bypass

url

XML signature HMAC truncation authentication bypass

url

XML signature HMAC truncation authentication bypass

url

XML signature HMAC truncation authentication bypass

url

XML signature HMAC truncation authentication bypass

url

XML signature HMAC truncation authentication bypass

url

XML signature HMAC truncation authentication bypass

advisory

XML signature HMAC truncation authentication bypass

advisory

Browse GCVE Records

74,355 records in the GCVE database · Updated July 23, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON