CVE-2012-3451

Apache CXF before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to execute unintended web-service operations by sending a header with a SOAP Action String that is inconsistent with the message body.

🔗 References (42)

• secalert@redhathttp://cxf.apache.org/cve-2012-3451.html
• secalert@redhathttp://rhn.redhat.com/errata/RHSA-2012-1591.html
• secalert@redhathttp://rhn.redhat.com/errata/RHSA-2012-1592.html
• secalert@redhathttp://rhn.redhat.com/errata/RHSA-2012-1594.html
• secalert@redhathttp://rhn.redhat.com/errata/RHSA-2013-0256.html
• secalert@redhathttp://rhn.redhat.com/errata/RHSA-2013-0257.html
• secalert@redhathttp://rhn.redhat.com/errata/RHSA-2013-0258.html
• secalert@redhathttp://rhn.redhat.com/errata/RHSA-2013-0259.html
• secalert@redhathttp://rhn.redhat.com/errata/RHSA-2013-0726.html
• secalert@redhathttp://rhn.redhat.com/errata/RHSA-2013-0743.html
• secalert@redhathttp://secunia.com/advisories/51607
• secalert@redhathttp://secunia.com/advisories/52183
• secalert@redhathttp://svn.apache.org/viewvc?view=revision&revision=1368559
• secalert@redhathttps://bugzilla.redhat.com/show_bug.cgi?id=851896
• secalert@redhathttps://exchange.xforce.ibmcloud.com/vulnerabilities/78734