NVD

Id
26455  
Name
CVE-2015-5253  
Description
The SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote authenticated users to bypass authentication via a crafted SAML response with a valid signed assertion, related to a "wrapping attack."  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-11-18  
Modified Date
2016-12-02  
Seq
2015-5253  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
139881 26455 CVE-2015-5253 http://cxf.apache.org/security-advisories.data/CVE-2015-5253.txt.asc  View
139882 26455 CVE-2015-5253 RHSA-2016:0321  View
139883 26455 CVE-2015-5253 [oss-security] 20151114 New security advisory for Apache CXF  View
139884 26455 CVE-2015-5253 1034162  View
139885 26455 CVE-2015-5253 https://git-wip-us.apache.org/repos/asf?p=cxf.git;a=commitdiff;h=845eccb6484b43ba02875c71e824db23ae4f20c0  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10666 JVNDB-2015-005986 Apache CXF の SAML Web SSO モジュールにおける認証を回避される脆弱性 Apache CXF の SAML Web SSO モジュールは、"ラッピング攻撃 (wrapping attacks)" に関する処理に不備があるため、認証を回避される脆弱性が存在します。 CVE-2015-5253 82478 CVE-2015-5253 26455 4 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005986.html 2015-07-31 2015-11-20 View