CVE-2012-3451: Input Validation
Apache CXF before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to execute unintended web-service operations by sending a header with a SOAP Action String that is inconsistent with the message body.
Other sources
Apache CXF is vulnerable to SOAPAction spoofing attacks under certain conditions. If web services are exposed via Apache CXF that use a unique SOAPAction for each service operation, then a remote attacker could perform SOAPAction spoofing to call a forbidden operation if it accepts the same parameters as an allowed operation. WS-Policy validation is performed against the operation being invoked, and an attack must pass validation to be successful.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3451?
CVE-2012-3451 is considered to be of moderate severity, as it allows remote attackers to perform unauthorized operations under specific conditions.
How do I fix CVE-2012-3451?
To fix CVE-2012-3451, upgrade Apache CXF to version 2.6.2 or later, or to version 2.5.5, or to version 2.4.9 depending on the affected version.
What types of attacks does CVE-2012-3451 allow?
CVE-2012-3451 allows for SOAPAction spoofing attacks, enabling unauthorized access to restricted web service operations.
Which versions of Apache CXF are affected by CVE-2012-3451?
Apache CXF versions prior to 2.6.2, 2.5.5, and up to 2.4.9 are affected by CVE-2012-3451.
Are there any workarounds for CVE-2012-3451?
There are no known workarounds for CVE-2012-3451; the recommended action is to update to the fixed versions.