Product
A spoofing vulnerability in the .NET System.Security.Cryptography.Xml library allows for certificate forgery and token spoofing via improper validation of KeyInfoX509Data serialized certificate formats.