Beveiligingsadvies

CVE-2014-3623

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2014-10-30 14:00:00

Laatst bijgewerkt 2024-08-06 10:50:17

Toegewezen door redhat

CVSS-score geen score

Status PUBLISHED

Beschrijving

Apache WSS4J before 1.6.17 and 2.x before 2.0.2, as used in Apache CXF 2.7.x before 2.7.13 and 3.0.x before 3.0.2, when using TransportBinding, does not properly enforce the SAML SubjectConfirmation method security semantics, which allows remote attackers to conduct spoofing attacks via unspecified vectors.

← Alle CVE's bekijken Bekijk op cve.org ↗