CVE-2012-4418

Currently unrated

Key Information:

Vendor
Apache
Status
Axis2
Vendor
CVE Published:
9 October 2012

Summary

Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."

References

http://www.openwall.com/lists/oss-security/2012/09/13/1
mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2012/09/12/1
mailing-listx_refsource_MLIST
https://bugzilla.redhat.com/show_bug.cgi?id=856755
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.