CVE-2014-0034

Published: Jul 7, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x before 2.7.9 does not properly validate SAML tokens when caching is enabled, which allows remote attackers to gain access via an invalid SAML token.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

RHSA-2014:0798

vendor-advisory

x_refsource_REDHAT

http://cxf.apache.org/security-advisories.data/CVE-2014-0034.txt.asc

x_refsource_CONFIRM

68441

vdb-entry

x_refsource_BID

http://svn.apache.org/viewvc?view=revision&revision=1551228

x_refsource_CONFIRM

RHSA-2015:0850

vendor-advisory

x_refsource_REDHAT

RHSA-2014:0797

vendor-advisory

x_refsource_REDHAT

RHSA-2015:0851

vendor-advisory

x_refsource_REDHAT

RHSA-2014:0799

vendor-advisory

x_refsource_REDHAT

RHSA-2014:1351

vendor-advisory

x_refsource_REDHAT

[cxf-commits] 20200116 svn commit: r1055336 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-12423.txt.asc security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html

mailing-list

x_refsource_MLIST

[cxf-commits] 20200319 svn commit: r1058035 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html

mailing-list

x_refsource_MLIST

[cxf-commits] 20200401 svn commit: r1058573 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2020-1954.txt.asc security-advisories.html

mailing-list

x_refsource_MLIST

[cxf-commits] 20201112 svn commit: r1067927 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2020-13954.txt.asc security-advisories.html

mailing-list

x_refsource_MLIST

[cxf-commits] 20210402 svn commit: r1073270 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2021-22696.txt.asc security-advisories.html

mailing-list

x_refsource_MLIST

[cxf-commits] 20210616 svn commit: r1075801 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2021-30468.txt.asc security-advisories.html

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2014-0034

Description

Affected Products

References