GHSA-66rx-gqx3-p98mMedium

Improper Authentication in Apache Axis2

Published
May 13, 2022
Last Modified
January 27, 2023

🔗 CVE IDs covered (1)

CVE-2012-5351 →

📋 Description

Apache Axis2 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack," a different vulnerability than CVE-2012-4418.

🎯 Affected products1

  • maven/org.apache.axis2:axis2:< 1.6.4

🔗 References (5)