CVE-2017-5653
EUVD-2022-414218.04.2017, 16:59
JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encrypted, which allows remote attackers to spoof servers.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apache | cxf | 3.0.0 ≤ 𝑥 ≤ 3.0.13 |
| apache | cxf | 3.1.0 ≤ 𝑥 ≤ 3.1.11 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References