NVD

Id
44191  
Name
CVE-2012-2379  
Description
Apache CXF 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1, when a Supporting Token specifies a child WS-SecurityPolicy 1.1 or 1.2 policy, does not properly ensure that an XML element is signed or encrypted, which has unspecified impact and attack vectors.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2013-01-02  
Modified Date
2013-02-13  
Seq
2012-2379  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221945 44191 CVE-2012-2379 http://cxf.apache.org/cve-2012-2379.html  View
221946 44191 CVE-2012-2379 RHSA-2012:1559  View
221947 44191 CVE-2012-2379 RHSA-2012:1573  View
221948 44191 CVE-2012-2379 RHSA-2012:1591  View
221949 44191 CVE-2012-2379 RHSA-2012:1592  View
221950 44191 CVE-2012-2379 RHSA-2012:1593  View
221951 44191 CVE-2012-2379 RHSA-2012:1594  View
221952 44191 CVE-2012-2379 RHSA-2013:0191  View
221953 44191 CVE-2012-2379 RHSA-2013:0192  View
221954 44191 CVE-2012-2379 RHSA-2013:0193  View
221955 44191 CVE-2012-2379 RHSA-2013:0194  View
221956 44191 CVE-2012-2379 RHSA-2013:0195  View
221957 44191 CVE-2012-2379 RHSA-2013:0196  View
221958 44191 CVE-2012-2379 RHSA-2013:0197  View
221959 44191 CVE-2012-2379 RHSA-2013:0198  View
221960 44191 CVE-2012-2379 http://svn.apache.org/viewvc?view=revision&revision=1338219  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30147 JVNDB-2012-005854 Apache CXF における脆弱性 Apache CXF は、Supporting Token が child WS-SecurityPolicy 1.1 または 1.2 ポリシを指定する場合、XML 要素が署名されているまたは暗号化されていることを適切に確認しないため、不特定の影響を受ける脆弱性が存在します。 CVE-2012-2379 55617 CVE-2012-2379 44191 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005854.html 2012-05-14 2013-01-15 View