CVE-2012-3451 PUBLISHED CVSS 4.300000190734863 MEDIUM

Reported by redhat · Published September 24, 2012

Apache CXF before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to execute unintended web-service operations by sending a header with a SOAP Action String that is inconsistent with the message body.

Risk Scores

CVSS v2.0
4.300000190734863

Affected Products

VendorProductVersions
n/an/an/a
Mavenorg.apache.cxf:cxf-api2.4-alpha0, 2.4-alpha0, 2.4-alpha0
n/an/an/a, n/a, n/a
Mavenorg.apache.cxf:cxf0, 0, 0
Mavenorg.apache.cxf:cxf-rt-bindings-soap2.4, 2.4, 2.4

Timeline

References

…and 10 more

Open in Interactive Console →