Поиск уязвимостей
Количество 4
Количество 4
CVE-2015-5253
The SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote authenticated users to bypass authentication via a crafted SAML response with a valid signed assertion, related to a "wrapping attack."
CVE-2015-5253
The SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote authenticated users to bypass authentication via a crafted SAML response with a valid signed assertion, related to a "wrapping attack."
GHSA-3336-h95j-hvvf
Improper Access Control in Apache CXF
ALT-PU-2017-3639
ALT-PU-2017-3639: package `cxf` update to version 3.1.6-alt1_5jpp8
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2015-5253 The SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote authenticated users to bypass authentication via a crafted SAML response with a valid signed assertion, related to a "wrapping attack." | CVSS2: 4.9 | 6% Низкий | почти 11 лет назад |
 | CVE-2015-5253 The SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote authenticated users to bypass authentication via a crafted SAML response with a valid signed assertion, related to a "wrapping attack." | CVSS2: 4 | 6% Низкий | почти 11 лет назад |
| GHSA-3336-h95j-hvvf Improper Access Control in Apache CXF | 6% Низкий | больше 4 лет назад | |
| ALT-PU-2017-3639 ALT-PU-2017-3639: package `cxf` update to version 3.1.6-alt1_5jpp8 | CVSS3: 5.3 | около 9 лет назад |
Уязвимостей на страницу