NVD

Id
45046  
Name
CVE-2012-3451  
Description
Apache CXF before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to execute unintended web-service operations by sending a header with a SOAP Action String that is inconsistent with the message body.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-09-24  
Modified Date
2013-05-14  
Seq
2012-3451  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
225856 45046 CVE-2012-3451 http://cxf.apache.org/cve-2012-3451.html  View
225857 45046 CVE-2012-3451 RHSA-2012:1591  View
225858 45046 CVE-2012-3451 RHSA-2012:1592  View
225859 45046 CVE-2012-3451 RHSA-2012:1594  View
225860 45046 CVE-2012-3451 RHSA-2013:0256  View
225861 45046 CVE-2012-3451 RHSA-2013:0257  View
225862 45046 CVE-2012-3451 RHSA-2013:0258  View
225863 45046 CVE-2012-3451 RHSA-2013:0259  View
225864 45046 CVE-2012-3451 RHSA-2013:0726  View
225865 45046 CVE-2012-3451 RHSA-2013:0743  View
225866 45046 CVE-2012-3451 http://svn.apache.org/viewvc?view=revision&revision=1368559  View
225867 45046 CVE-2012-3451 apache-cfx-soapaction-security-bypass(78734)  View
225868 45046 CVE-2012-3451 https://bugzilla.redhat.com/show_bug.cgi?id=851896  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28847 JVNDB-2012-004554 Apache CXF における意図しない Web サービスの操作を行われる脆弱性 Apache CXF には、意図しない Web サービスの操作を行われる脆弱性が存在します。 CVE-2012-3451 56689 CVE-2012-3451 45046 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004554.html 2012-08-02 2016-02-16 View