NVD

Id
46740  
Name
CVE-2012-5633  
Description
The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2013-03-12  
Modified Date
2013-06-04  
Seq
2012-5633  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
234144 46740 CVE-2012-5633 http://cxf.apache.org/cve-2012-5633.html  View
234145 46740 CVE-2012-5633 http://packetstormsecurity.com/files/120213/Apache-CXF-WS-Security-URIMappingInterceptor-Bypass.html  View
234146 46740 CVE-2012-5633 RHSA-2013:0256  View
234147 46740 CVE-2012-5633 RHSA-2013:0257  View
234148 46740 CVE-2012-5633 RHSA-2013:0258  View
234149 46740 CVE-2012-5633 RHSA-2013:0259  View
234150 46740 CVE-2012-5633 RHSA-2013:0726  View
234151 46740 CVE-2012-5633 RHSA-2013:0743  View
234152 46740 CVE-2012-5633 RHSA-2013:0749  View
234153 46740 CVE-2012-5633 20130208 New security advisories for Apache CXF  View
234154 46740 CVE-2012-5633 http://stackoverflow.com/questions/7933293/why-does-apache-cxf-ws-security-implementation-ignore-get-requests  View
234155 46740 CVE-2012-5633 http://svn.apache.org/viewvc?view=revision&revision=1409324  View
234156 46740 CVE-2012-5633 http://svn.apache.org/viewvc?view=revision&revision=1420698  View
234157 46740 CVE-2012-5633 57874  View
234158 46740 CVE-2012-5633 apachecxf-wssecurity-security-bypass(81980)  View
234159 46740 CVE-2012-5633 https://issues.apache.org/jira/browse/CXF-4629  View
234160 46740 CVE-2012-5633 https://issues.jboss.org/browse/JBWS-3575  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30264 JVNDB-2012-005971 Apache CXF の URIMappingInterceptor における SOAP サービスへのアクセス権を取得される脆弱性 Apache CXF の URIMappingInterceptor は、WS-Security 処理を回避する WSS4JInInterceptor を使用する場合、SOAP サービスへのアクセス権を取得される脆弱性が存在します。 CVE-2012-5633 58871 CVE-2012-5633 46740 5.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005971.html 2012-11-14 2013-03-25 View