GitHub Advisoryadvisory · Maven

GHSA-88r4-38gc-97p4 Apache Axis2 Vulnerable to XML Signature wrapping attack

MEDIUM Published 2022-05-17 Modified 2024-01-12 Official page ↗
Aliases
CVE-2012-4418
Ecosystem
Maven
Packages
org.apache.axis2:axis2
Severity
Moderate
Weaknesses
CWE-287
Reviewed
2024-01-12

Affected packages

• Maven org.apache.axis2:axis2: < 1.7.9 → fixed in 1.7.9

Description

Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."

Related

Alias · CVE (1)

  • CVE-2012-4418 Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack." vulnerability

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References