Vulnerability report: authentication bypass?

[Zico]

Hi,

Please pardon me if I missed any email thread on this issue... but .. it
just got our attention.
Do we need to patch our IdP for this?
https://www.kb.cert.org/vuls/id/475445

-- 
Best,
Zico
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180302/4b7d63e4/attachment.html>