NetSight
IP …
medium5.8

CVE-2012-5633

The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security proce…

Impact

The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request.

Affected products

VendorProductAffected versions
ApacheCxf
through 2.5.7
Versions 2.5.0, 2.5.1, 2.5.2, 2.5.3, 2.5.4

Weakness classification

CWE-287

References