exploitDog

CVE-2012-2378

Опубликовано: 07 июн. 2012

Источник: redhat

CVSS2: 4.3

EPSS Низкий

Описание

Apache CXF 2.4.5 through 2.4.7, 2.5.1 through 2.5.3, and 2.6.x before 2.6.1, does not properly enforce child policies of a WS-SecurityPolicy 1.1 SupportingToken policy on the client side, which allows remote attackers to bypass the (1) AlgorithmSuite, (2) SignedParts, (3) SignedElements, (4) EncryptedParts, and (5) EncryptedElements policies.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

https://bugzilla.redhat.com/show_bug.cgi?id=826533apache-cxf: Certain child policies of WS-SecurityPolicy 1.1 SupportingToken policy not applied on the client side

EPSS

Процентиль: 89%

0.04238

Низкий

4.3 Medium

CVSS2

Связанные уязвимости

CVE-2012-2378

nvd

около 13 лет назад

Apache CXF 2.4.5 through 2.4.7, 2.5.1 through 2.5.3, and 2.6.x before 2.6.1, does not properly enforce child policies of a WS-SecurityPolicy 1.1 SupportingToken policy on the client side, which allows remote attackers to bypass the (1) AlgorithmSuite, (2) SignedParts, (3) SignedElements, (4) EncryptedParts, and (5) EncryptedElements policies.

GHSA-vjpc-vf4f-82qg

github

больше 3 лет назад

Improper Authentication in Apache CXF

EPSS

Процентиль: 89%

0.04238

Низкий

4.3 Medium

CVSS2