CVE-2012-2378 in CXFinfo

Zusammenfassung

von VulDB • 25.06.2026

Apache CXF 2.4.5 fino a 2.4.7, 2.5.1 fino a 2.5.3 e le versioni 2.6.x precedenti alla 2.6.1 non applicano correttamente le child policies di una WS-SecurityPolicy 1.1 SupportingToken policy sul lato client, il che consente ad attaccanti remoti di bypassare le politiche (1) AlgorithmSuite, (2) SignedParts, (3) SignedElements, (4) EncryptedParts e (5) EncryptedElements.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservieren

19.04.2012

Veröffentlichung

04.01.2013

Moderieren

akzeptiert

Eintrag

VDB-63334

CPE

bereit

EPSS

0.03926

KEV

nein

Aktivitäten

very low

Sektor

Government, Hospital, ...

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2012-2378
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2012-2378
CVE Detailshttps://www.cvedetails.com/cve/CVE-2012-2378/

◂ ZurückÜbersichtWeiter ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!