CoreWCF.Primitives
CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. The goal of this project is to enable existing WCF services to move to .NET Core.
Security Advisories for CoreWCF.Primitives in nuget
High
about 2 months ago
CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality
nuget
CoreWCF.Primitives
High
about 2 months ago
CoreWCF: XML Signature Wrapping in WS-Security endorsing/supporting signature verification allows replay of captured signed messages
nuget
CoreWCF.Primitives
Critical
about 2 months ago
CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation
nuget
CoreWCF.Primitives
High
about 2 months ago
CoreWCF: SAML SubjectConfirmation methods and holder-of-key proof keys are not enforced
nuget
CoreWCF.Primitives
Low
about 2 months ago
CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass
nuget
CoreWCF.Primitives
Moderate
about 2 months ago
CoreWCF: SAML token replay protection is inoperative
nuget
CoreWCF.Primitives
High
about 2 months ago
CoreWCF: SamlSerializer skips SignatureValue verification when SAML signing token is not an X.509 certificate
nuget
CoreWCF.Primitives
Moderate
about 2 months ago
CoreWCF: WS-Security signature substitution via document-wide Signature lookup
nuget
CoreWCF.Primitives