Remote web-service operation execution in Apache CXF
Apache CXF before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to execute unintended web-service operations by sending a header with a SOAP Action String that is inconsistent with the message body.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2012-3451US | medium4.3 | — | ||
Apache CXF before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to execute unintended web-service operations by sending a header with a SOAP Action Stri… | ||||
02
references
External citations — patches, advisories, analysis.
- http://cxf.apache.org/cve-2012-3451.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2012-1591.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2012-1592.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2012-1594.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2013-0256.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2013-0257.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2013-0258.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2013-0259.htmlWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan