CVE-2012-2378 in Apache CXF
요약 (영어)
Apache CXF 2.4.5 through 2.4.7, 2.5.1 through 2.5.3, and 2.6.x before 2.6.1, does not properly enforce child policies of a WS-SecurityPolicy 1.1 SupportingToken policy on the client side, which allows remote attackers to bypass the (1) AlgorithmSuite, (2) SignedParts, (3) SignedElements, (4) EncryptedParts, and (5) EncryptedElements policies.
예약하다
2012. 04. 19.
공개
2013. 01. 04.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 63334 | Apache CXF WS-Security 권한 상승 | 264 | 정의되지 않음 | 정의되지 않음 | CVE-2012-2378 |