VDB
CVE-2012-3451
CVE-2012-3451
PUBLISHED
CVSS 4.300000190734863 MEDIUM
Reported by redhat · Published September 24, 2012
Apache CXF before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to execute unintended web-service operations by sending a header with a SOAP Action String that is inconsistent with the message body.
Risk Scores
CVSS 2.0
4.300000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| Maven | org.apache.cxf:cxf-api | 2.4-alpha0, 2.4-alpha0, 2.4-alpha0 |
| n/a | n/a | n/a, n/a, n/a |
| Maven | org.apache.cxf:cxf | 0, 0, 0 |
| Maven | org.apache.cxf:cxf-rt-bindings-soap | 2.4, 2.4, 2.4 |
Timeline
- Sep 24, 2012 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 3, 2023 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 25, 2023 EPSS Score
References
- x_refsource_MISC
- RHSA-2013:0256 vendor-advisoryx_refsource_REDHAT
- x_refsource_CONFIRM
- RHSA-2012:1594 vendor-advisoryx_refsource_REDHAT
- RHSA-2013:0257 vendor-advisoryx_refsource_REDHAT
- 51607 third-party-advisoryx_refsource_SECUNIA
- RHSA-2013:0258 vendor-advisoryx_refsource_REDHAT
- apache-cfx-soapaction-security-bypass(78734) vdb-entryx_refsource_XF
- RHSA-2012:1592 vendor-advisoryx_refsource_REDHAT
- 52183 third-party-advisoryx_refsource_SECUNIA
- RHSA-2013:0743 vendor-advisoryx_refsource_REDHAT
- RHSA-2012:1591 vendor-advisoryx_refsource_REDHAT
- RHSA-2013:0259 vendor-advisoryx_refsource_REDHAT
- x_refsource_CONFIRM
- RHSA-2013:0726 vendor-advisoryx_refsource_REDHAT
- [cxf-commits] 20200116 svn commit: r1055336 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-12423.txt.asc security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html mailing-listx_refsource_MLIST
- [cxf-commits] 20200319 svn commit: r1058035 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html mailing-listx_refsource_MLIST
- [cxf-commits] 20200401 svn commit: r1058573 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2020-1954.txt.asc security-advisories.html mailing-listx_refsource_MLIST
- [cxf-commits] 20201112 svn commit: r1067927 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2020-13954.txt.asc security-advisories.html mailing-listx_refsource_MLIST
- [cxf-commits] 20210402 svn commit: r1073270 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2021-22696.txt.asc security-advisories.html mailing-listx_refsource_MLIST
…and 10 more