PT-2013-1817 · Apache · Apache Cxf
CVE-2012-5633
·
Publicado
2013-03-12
·
Atualizado
2023-02-13
CVSS v2.0
5.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Apache CXF versions 2.5.0 through 2.5.7
Apache CXF versions 2.6.0 through 2.6.4
Apache CXF versions 2.7.0 through 2.7.1
Description
The issue allows remote attackers to obtain access to SOAP services via an HTTP GET request, bypassing WS-Security processing when using the WSS4JInInterceptor.
Recommendations
For Apache CXF versions 2.5.0 through 2.5.7, update to version 2.5.8 or later.
For Apache CXF versions 2.6.0 through 2.6.4, update to version 2.6.5 or later.
For Apache CXF versions 2.7.0 through 2.7.1, update to version 2.7.2 or later.
Correção
Improper Authentication
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Apache Cxf