Apache Axis allows Exposure of Sensitive Information to an Unauthorized Actor

Description

References

• nvd.nist.gov/vuln/detail/CVE-2007-2353 · ADVISORY
• albfernandez/axis1-java · WEB
• albfernandez/axis1-java commit 32f3503 · WEB
• apache/axis-axis1-java commit 2fdbb91 · WEB
• apache/axis-axis1-java commit 7ba89de · WEB
• exchange.xforce.ibmcloud.com/vulnerabilities/34167 · WEB
• apache/axis-axis1-java · PACKAGE
• attrition.org/pipermail/vim/2007-April/001562.html · WEB
• osvdb.org/34154
• securityfocus.com/bid/23687 · Exploit

Autres vulnérabilités de org.apache.axis:axis

• CVE-2023-51441ÉLEVÉE 7.2** UNSUPPORTED WHEN ASSIGNED ** Improper Input Validation vulnerability in Apache Axis allowed users with access to the admin service to per…
• CVE-2023-40743CRITIQUE 9.8** UNSUPPORTED WHEN ASSIGNED ** When integrating Apache Axis 1.x in an application, it may not have been obvious that looking up a service t…
• CVE-2019-0227ÉLEVÉE 7.5A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bu…
• CVE-2018-8032MOYENNE 6.1Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.
• CVE-2014-3596MOYENNE 5.8The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's C…