CVE-2012-2378 in CXF
Сводка (Английский)
Apache CXF 2.4.5 through 2.4.7, 2.5.1 through 2.5.3, and 2.6.x before 2.6.1, does not properly enforce child policies of a WS-SecurityPolicy 1.1 SupportingToken policy on the client side, which allows remote attackers to bypass the (1) AlgorithmSuite, (2) SignedParts, (3) SignedElements, (4) EncryptedParts, and (5) EncryptedElements policies.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Резервировать
19.04.2012
Раскрытие
04.01.2013
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 63334 | Apache CXF WS-Security эскалация привилегий | 264 | Не определено | Не определено | CVE-2012-2378 |