• info
• discussion
• exploit
• solution
• references

IETF and W3C XML Digital Signature Specification HMAC Truncation Authentication Bypass Vulnerability

Attackers can exploit this vulnerability using readily available tools.