CVE-2012-3451
24.09.2012, 17:55
Apache CXF before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to execute unintended web-service operations by sending a header with a SOAP Action String that is inconsistent with the message body.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apache | cxf | 𝑥 < 2.4.9 |
| apache | cxf | 2.5.0 ≤ 𝑥 < 2.5.5 |
| apache | cxf | 2.6.0 ≤ 𝑥 < 2.6.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References