QwikSec

Security Database

CVE

CWE

Training

CVE-2012-5633

Published: Mar 12, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

third-party-advisory

x_refsource_SECUNIA

http://svn.apache.org/viewvc?view=revision&revision=1409324

x_refsource_CONFIRM

http://stackoverflow.com/questions/7933293/why-does-apache-cxf-ws-security-implementation-ignore-get-requests

x_refsource_MISC

20130208 New security advisories for Apache CXF

mailing-list

x_refsource_FULLDISC

vendor-advisory

x_refsource_REDHAT

vdb-entry

x_refsource_OSVDB

vendor-advisory

x_refsource_REDHAT

http://svn.apache.org/viewvc?view=revision&revision=1420698

x_refsource_CONFIRM

https://issues.jboss.org/browse/JBWS-3575

x_refsource_MISC

vdb-entry

x_refsource_BID

https://issues.apache.org/jira/browse/CXF-4629

x_refsource_CONFIRM

vendor-advisory

x_refsource_REDHAT

third-party-advisory

x_refsource_SECUNIA

vendor-advisory

x_refsource_REDHAT

vendor-advisory

x_refsource_REDHAT

http://packetstormsecurity.com/files/120213/Apache-CXF-WS-Security-URIMappingInterceptor-Bypass.html

x_refsource_MISC

http://cxf.apache.org/cve-2012-5633.html

x_refsource_CONFIRM

apachecxf-wssecurity-security-bypass(81980)

vdb-entry

x_refsource_XF

vendor-advisory

x_refsource_REDHAT

vendor-advisory

x_refsource_REDHAT

[cxf-commits] 20200116 svn commit: r1055336 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-12423.txt.asc security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html

mailing-list

x_refsource_MLIST

[cxf-commits] 20200319 svn commit: r1058035 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html

mailing-list

x_refsource_MLIST

[cxf-commits] 20200401 svn commit: r1058573 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2020-1954.txt.asc security-advisories.html

mailing-list

x_refsource_MLIST

[cxf-commits] 20201112 svn commit: r1067927 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2020-13954.txt.asc security-advisories.html

mailing-list

x_refsource_MLIST

[cxf-commits] 20210402 svn commit: r1073270 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2021-22696.txt.asc security-advisories.html

mailing-list

x_refsource_MLIST

[cxf-commits] 20210616 svn commit: r1075801 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2021-30468.txt.asc security-advisories.html

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.