DeutschShown in its original language — a full translation is planned for a future version.
Apache CXF: Mehrere Schwachstellen
view advisory published 2019-11-05
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache CXF ausnutzen, um einen Denial of Service Angriff durchzuführen oder um Sicherheitsvorkehrungen zu umgehen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-12419US | critical9.8OT elevated | — | ||
Apache CXF before 3.3.4 and 3.2.11 provides all of the components that are required to build a fully fledged OpenId Connect service. There is a vulnerability in the access token se… | ||||
| CVE-2019-12406US | medium6.5 | — | ||
Apache CXF before 3.3.4 and 3.2.11 does not restrict the number of message attachments present in a given message. This leaves open the possibility of a denial of service type atta… | ||||
02
references
External citations — patches, advisories, analysis.
- Apache Security Advisory vom 2019-11-05external
- Apache Security Advisory vom 2019-11-05external
- Red Hat Security Advisory RHSA-2020:0556 vom 2020-02-19external
- Red Hat Security Advisory RHSA-2020:2067 vom 2020-05-18external
- Red Hat Security Advisory RHSA-2020:2333 vom 2020-05-28external
- Red Hat Security Advisory RHSA-2020:3196 vom 2020-07-29external
- Red Hat Security Advisory RHSA-2020:3197 vom 2020-07-29external
- Red Hat Security Advisory RHSA-2020:5568 vom 2020-12-16external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan