NVD

Id
38268  
Name
CVE-2013-2172  
Description
jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak "canonicalization algorithm to apply to the SignedInfo part of the Signature."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-08-20  
Modified Date
2016-11-28  
Seq
2013-2172  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
195689 38268 CVE-2013-2172 RHSA-2013:1207  View
195690 38268 CVE-2013-2172 RHSA-2013:1208  View
195691 38268 CVE-2013-2172 RHSA-2013:1209  View
195692 38268 CVE-2013-2172 RHSA-2013:1217  View
195693 38268 CVE-2013-2172 RHSA-2013:1218  View
195694 38268 CVE-2013-2172 RHSA-2013:1219  View
195695 38268 CVE-2013-2172 RHSA-2013:1220  View
195696 38268 CVE-2013-2172 RHSA-2013:1375  View
195697 38268 CVE-2013-2172 RHSA-2013:1437  View
195698 38268 CVE-2013-2172 RHSA-2013:1853  View
195699 38268 CVE-2013-2172 RHSA-2014:0212  View
195700 38268 CVE-2013-2172 http://santuario.apache.org/secadv.data/CVE-2013-2172.txt.asc  View
195701 38268 CVE-2013-2172 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
195702 38268 CVE-2013-2172 http://svn.apache.org/viewvc/santuario/xml-security-java/branches/1.5.x-fixes/src/main/java/org/apache/jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java?r1=1353876&r2=1493772&pathrev=1493772&diff_format=h  View
195703 38268 CVE-2013-2172 DSA-3065  View
195704 38268 CVE-2013-2172 http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html  View
195705 38268 CVE-2013-2172 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
195706 38268 CVE-2013-2172 60846  View
195707 38268 CVE-2013-2172 http://www.vmware.com/security/advisories/VMSA-2014-0012.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22253 JVNDB-2013-003828 Apache Santuario XML Security for Java における XML 署名を偽装される脆弱性 Apache Santuario XML Security for Java の jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java には、XML 署名を偽装される脆弱性が存在します。 CVE-2013-2172 62114 CVE-2013-2172 38268 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003828.html 2013-06-17 2015-08-03 View