VDB
GCVE-110-MAGEIA-2014-2
GCVE-110-MAGEIA-2014-2
Advisory Published
James Forshaw discovered that Apache XML Security for Java incorrectly
validated CanonicalizationMethod parameters. An attacker could use this
flaw to spoof XML signatures (CVE-2013-2172).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | freecol | 0 (affected), 0.10.7-1.mga3 (unaffected) | — |
| Mageia | xml-security | 1.5.5-1.mga3 (unaffected), 0 (affected), 1.5.5-1.mga3 (unaffected), 0 (affected) | — |
Aliases
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.