CVE-2014-3584 in CXF
Summary
The SamlHeaderInHandler in Apache CXF before 2.6.11, 2.7.x before 2.7.8, and 3.0.x before 3.0.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted SAML token in the authorization header of a request to a JAX-RS service.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
05/14/2014
Disclosure
10/30/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 68064 | Apache CXF SAML Token resource management | 399 | Unproven | Official fix | CVE-2014-3584 |