CVE-2011-4314

CVE-2011-4314 describes a vulnerability in OpenID4Java, affecting products like JBoss Enterprise Application Platform and Kay Framework, where Attribute Exchange (AX) information is not properly signed. This allows a remote attacker to modify sensitive AX data via a man-in-the-middle (MITM) attack without detection. With a CVSS score of 5.8, this vulnerability has a network attack vector and medium attack complexity, potentially leading to partial integrity and availability impacts. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.