CVE-2012-5633: Medium severity apache cxf vulnerability
The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-5633?
CVE-2012-5633 is classified as a high severity vulnerability due to the potential for unauthorized access to SOAP services.
How do I fix CVE-2012-5633?
To fix CVE-2012-5633, upgrade Apache CXF to version 2.7.2, 2.6.5, or 2.5.8 or later.
What versions of Apache CXF are affected by CVE-2012-5633?
CVE-2012-5633 affects Apache CXF versions 2.5.0 to 2.5.7, 2.6.0 to 2.6.4, and 2.7.0 to 2.7.1.
What does CVE-2012-5633 allow attackers to do?
CVE-2012-5633 allows remote attackers to bypass WS-Security processing and gain access to SOAP services via HTTP GET requests.
Is CVE-2012-5633 related to web service security?
Yes, CVE-2012-5633 directly relates to the security of web services by exploiting weaknesses in the WS-Security processing.