Описание
Apache Axis2 Vulnerable to XML Signature wrapping attack
Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2012-4418
- https://bugzilla.redhat.com/show_bug.cgi?id=856755
- https://issues.apache.org/jira/browse/AXIS2-5930
- https://issues.apache.org/jira/browse/AXIS2C-1694
- https://web.archive.org/web/20121114075457/http://www.securityfocus.com/bid/55508
- http://www.nds.rub.de/media/nds/veroeffentlichungen/2012/08/22/BreakingSAML_3.pdf
- http://www.openwall.com/lists/oss-security/2012/09/12/1
- http://www.openwall.com/lists/oss-security/2012/09/13/1
Пакеты
Наименование
org.apache.axis2:axis2
maven
Затронутые версииВерсия исправления
< 1.7.9
1.7.9
Связанные уязвимости
redhat
больше 13 лет назад
Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."
nvd
больше 13 лет назад
Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."