CVE-2012-2379 in Apache CXF
요약 (영어)
Apache CXF 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1, when a Supporting Token specifies a child WS-SecurityPolicy 1.1 or 1.2 policy, does not properly ensure that an XML element is signed or encrypted, which has unspecified impact and attack vectors.
예약하다
2012. 04. 19.
공개
2013. 01. 02.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 63299 | Apache CXF WS-Security 원격 코드 실행 | 정의되지 않음 | 공식 수정 | CVE-2012-2379 |