CVE-2012-5633

The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security…

published March 12, 2013

CVSS
—
EPSS
8%
Percentile
94.8
In the wild
Unconfirmed
What it is

The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08157 · 94.8th percentile
Published
2013-03-12T22:00Z
EPSS history
Timeline
  • 12 MAR 22:00Z
    The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security…
    cvelistv5