Improper Authentication in Apache Axis2

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2012-5351 · ADVISORY
• exchange.xforce.ibmcloud.com/vulnerabilities/79487 · WEB
• oracle.com/security-alerts/cpuapr2022.html · WEB
• nds.rub.de/media/nds/veroeffentlichungen/2012/08/22/BreakingSAML_3.pdf · WEB

org.apache.axis2:axis2 のその他の脆弱性

• CVE-2012-5785中 5.8Apache Axis2/Java 1.6.2 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subj…
• CVE-2012-4418中 5.8Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."