CVE-2012-5633

Publication date 12 March 2013

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Description

The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request.

Read the notes from the security team

Status

Package Ubuntu Release Status
jbossas4 12.10 quantal
Not affected
12.04 LTS precise
Not affected
11.10 oneiric
Not affected
10.04 LTS lucid
Not affected
8.04 LTS hardy
Not affected

Notes

seth-arnold

I didn't find the WSS4JInInterceptor module in our sources, I don't think our version is affected

References

Other references

Access our resources on patching vulnerabilities