Apache CXF before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3, when the plaintext UsernameToken WS-SecurityPolicy is enabled, allows r

Summary

Apache CXF before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3, when the plaintext UsernameToken WS-SecurityPolicy is enabled, allows remote attackers to bypass authentication via a security header of a SOAP request containing a UsernameToken element that lacks a password child element.

Timeline

1. Mar 12, 2013, 10:00 PM UTCCVE published
2. Aug 6, 2024, 2:18 PM UTCRecord last updated

Affected versions

• n/a n/a

  Version range not reported

• org.apache.cxf:cxf-rt-frontend-jaxrsMaven

  fixed in 2.5.9

• org.apache.cxf:cxf-rt-frontend-jaxrsMaven

  From 2.6.0 · fixed in 2.6.6

• org.apache.cxf:cxf-rt-frontend-jaxrsMaven

  From 2.7.0 · fixed in 2.7.3

References 15