Improper Authentication in Apache CXF
The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2012-5633US | medium5.8 | — | ||
The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows r… | ||||
02
references
External citations — patches, advisories, analysis.
- http://cxf.apache.org/cve-2012-5633.htmlWEB
- http://packetstormsecurity.com/files/120213/Apache-CXF-WS-Security-URIMappingInterceptor-Bypass.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2013-0256.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2013-0257.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2013-0258.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2013-0259.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2013-0726.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2013-0743.htmlWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan