[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhNLWP4-uyJEyBHlTe780Aa-4cenizdB1KO8uyyZEcXo":3,"g5a-risk:CVE-2009-3474":209},{"success":4,"data":5,"meta":207},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":82,"references":83,"referencesCount":136,"weaknesses":137,"weaknessesCount":141,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":142,"seoMetadata":143,"configurations":168,"relatedVendorCves":205,"notableEvents":206},"CVE-2009-3474","What is CVE-2009-3474?","OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by Internet2 Shibboleth Service Provider 2.x before 2.2.1, do not follow the KeyDescriptor element's Use attribute, which allows remote attackers to use a certificate for both signing and encryption when it is designated for just one purpose, potentially weakening the intended security application of the certificate.","OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by Internet2 Shibboleth Service Provider 2.x before 2.2.1, do not follow the KeyDescriptor...","2009-09-29T23:30:00.217","2026-06-16T23:11:40.58",7.5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","PARTIAL","",null,"HIGH",10,6.4,false,[],0.01544,[34,34,34,34,34,34,34],"High",[38,42,45,48,52,55,58,61,65,68,71,74,76,79],{"vendor":39,"product":40,"version":22,"criteria":41,"vulnerable":4},"internet2","opensaml","cpe:2.3:a:internet2:opensaml:2.0:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":43,"criteria":44,"vulnerable":4},"2.1.0","cpe:2.3:a:internet2:opensaml:2.1.0:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":46,"criteria":47,"vulnerable":4},"2.2.0","cpe:2.3:a:internet2:opensaml:2.2.0:*:*:*:*:*:*:*",{"vendor":39,"product":49,"version":50,"criteria":51,"vulnerable":4},"xmltooling","1.0.1","cpe:2.3:a:internet2:xmltooling:1.0.1:*:*:*:*:*:*:*",{"vendor":39,"product":49,"version":53,"criteria":54,"vulnerable":4},"1.1.0","cpe:2.3:a:internet2:xmltooling:1.1.0:*:*:*:*:*:*:*",{"vendor":39,"product":49,"version":56,"criteria":57,"vulnerable":4},"1.1.1","cpe:2.3:a:internet2:xmltooling:1.1.1:*:*:*:*:*:*:*",{"vendor":39,"product":49,"version":59,"criteria":60,"vulnerable":4},"1.2.0","cpe:2.3:a:internet2:xmltooling:1.2.0:*:*:*:*:*:*:*",{"vendor":39,"product":62,"version":63,"criteria":64,"vulnerable":4},"shibboleth-sp","1.3.1","cpe:2.3:a:internet2:shibboleth-sp:1.3.1:*:*:*:*:*:*:*",{"vendor":39,"product":62,"version":66,"criteria":67,"vulnerable":4},"1.3.2","cpe:2.3:a:internet2:shibboleth-sp:1.3.2:*:*:*:*:*:*:*",{"vendor":39,"product":62,"version":69,"criteria":70,"vulnerable":4},"1.3b","cpe:2.3:a:internet2:shibboleth-sp:1.3b:*:*:*:*:*:*:*",{"vendor":39,"product":62,"version":72,"criteria":73,"vulnerable":4},"1.3f","cpe:2.3:a:internet2:shibboleth-sp:1.3f:*:*:*:*:*:*:*",{"vendor":39,"product":62,"version":22,"criteria":75,"vulnerable":4},"cpe:2.3:a:internet2:shibboleth-sp:2.0:*:*:*:*:*:*:*",{"vendor":39,"product":62,"version":77,"criteria":78,"vulnerable":4},"2.1","cpe:2.3:a:internet2:shibboleth-sp:2.1:*:*:*:*:*:*:*",{"vendor":39,"product":62,"version":80,"criteria":81,"vulnerable":4},"2.2","cpe:2.3:a:internet2:shibboleth-sp:2.2:*:*:*:*:*:*:*",14,[84,89,92,95,100,104,107,111,114,118,120,122,124,126,128,130,132,134],{"url":85,"source":86,"tags":87},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F36855","Secunia",[88],"Vendor Advisory",{"url":90,"source":86,"tags":91},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F36868",[88],{"url":93,"source":86,"tags":94},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F36876",[88],{"url":96,"source":97,"tags":98},"http:\u002F\u002Fshibboleth.internet2.edu\u002Fsecadv\u002Fsecadv_20090817a.txt","Internet2",[99,88],"Patch",{"url":101,"source":102,"tags":103},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2009\u002Fdsa-1895","Debian",[99],{"url":105,"source":102,"tags":106},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2009\u002Fdsa-1896",[99],{"url":108,"source":109,"tags":110},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F36516","Securityfocus",[99],{"url":112,"source":97,"tags":113},"https:\u002F\u002Fbugs.internet2.edu\u002Fjira\u002Fbrowse\u002FCPPOST-28",[],{"url":115,"source":116,"tags":117},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F53474","Ibmcloud",[],{"url":85,"source":86,"tags":119},[88],{"url":90,"source":86,"tags":121},[88],{"url":93,"source":86,"tags":123},[88],{"url":96,"source":97,"tags":125},[99,88],{"url":101,"source":102,"tags":127},[99],{"url":105,"source":102,"tags":129},[99],{"url":108,"source":109,"tags":131},[99],{"url":112,"source":97,"tags":133},[],{"url":115,"source":116,"tags":135},[],18,[138],{"id":139,"name":139,"description":140},"Unknown","CWE-310",1,[],{"title":144,"metaDescription":145,"keywords":146,"canonicalUrl":147,"structuredData":148},"What is CVE-2009-3474? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2009-3474, a high severity cyber security vulnerability from 2009. OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, a...","CVE-2009-3474, CVE-2009-3474 vulnerability, CVE-2009-3474 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2009, CVSS score, exploit, patch, remediation, internet2 security, opensaml vulnerability, xmltooling vulnerability, shibboleth-sp vulnerability","\u002Fwhat-is\u002Fcve-2009-3474",{"@context":149,"@type":150,"headline":144,"description":145,"datePublished":10,"dateModified":11,"author":151,"publisher":155,"about":159,"mainEntityOfPage":163,"articleSection":166,"keywords":167},"https:\u002F\u002Fschema.org","TechArticle",{"@type":152,"name":153,"url":154},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":152,"name":153,"url":154,"logo":156},{"@type":157,"url":158},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":160,"name":6,"description":161,"additionalType":162},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":164,"@id":165},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2009-3474","Cybersecurity","CVE-2009-3474, CVE-2009-3474 vulnerability, CVE-2009-3474 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[169],{"Operator":170,"Negate":28,"Nodes":171},"AND",[172,189],{"Operator":173,"Negate":32,"CPEMatch":174},"OR",[175,177,179,181,183,185,187],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":176,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"258372E2-533F-46CB-B25A-5ECB3CC2F22F",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":178,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"1122AD73-8FDD-4387-A237-B493CE0D547E",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":180,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"0192C838-FD63-4CF7-9BF0-9BAFF101C612",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":182,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"B2D36F93-B9DE-422C-AD73-3D8AA58DB6BE",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":184,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"F5FCBF08-0DD9-4899-B4F5-5D7BFB0B5830",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":186,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"5457FF44-CB80-486B-B3B2-D40F34565976",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":188,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"5C3A371A-AF3E-44E5-8854-C5D61FF5660C",{"Operator":173,"Negate":32,"CPEMatch":190},[191,193,195,197,199,201,203],{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":192,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"CE02AD93-8ED6-46F1-81D8-B70CB9EB79BF",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":194,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"A6CF3BEC-262B-4901-8D73-D8BB1869A166",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":196,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"C6EE490F-9E85-44F9-9608-86D4FBDAD331",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":198,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"4515685C-B170-4829-9261-8FAD5C9F1874",{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":200,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"8FC9CB94-188C-4BE2-AD8E-EBBA5BA3731E",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":202,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"B9E3DA80-673A-47D7-BDE2-0AC112BB6C4C",{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":204,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"673CCD0B-9202-4EBA-96B2-11A438E8D464",[],[],{"lastModified":11,"cacheTime":208,"version":22},1793221143322,{"score":210,"band":211,"action":212,"scoredAt":213},46,"Medium","Plan remediation","2026-07-01T10:17:29.040542+00:00"]