CVE-2010-2076

Name of the Vulnerable Software and Affected Versions Apache CXF versions 2.0.x through 2.0.12 Apache CXF versions 2.1.x through 2.1.9 Apache CXF versions 2.2.x through 2.2.8

Description The issue allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service via a crafted DTD in SOAP messages. This is due to the improper rejection of DTDs in SOAP messages.

Recommendations For Apache CXF versions 2.0.x through 2.0.12, update to version 2.0.13 or later. For Apache CXF versions 2.1.x through 2.1.9, update to version 2.1.10 or later. For Apache CXF versions 2.2.x through 2.2.8, update to version 2.2.9 or later.