CVE-2014-0034 in Red Hat JBoss Enterprise Application Platform
Summary
The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x before 2.7.9 does not properly validate SAML tokens when caching is enabled, which allows remote attackers to gain access via an invalid SAML token.
Reservation
12/03/2013
Disclosure
07/07/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 70294 | Red Hat JBoss Enterprise Application Platform input validation | 20 | Not defined | Official fix | CVE-2014-0034 |