What is GHSA-wwq7-pxwc-p4rc?

GHSA-wwq7-pxwc-p4rc is a security advisory published by GitHub Security Advisories with Medium severity. Apache Axis2 has Improper Input Validation

Which CVE IDs does GHSA-wwq7-pxwc-p4rc cover?

GHSA-wwq7-pxwc-p4rc covers the following CVE IDs: CVE-2012-5785. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-wwq7-pxwc-p4rc?

GHSA-wwq7-pxwc-p4rc affects 2 products, including: maven/org.apache.axis2:axis2:\u003c 1.8.0; maven/org.apache.axis2:axis2-transport-http:\u003c 1.8.0.

GHSA-wwq7-pxwc-p4rcMedium

Apache Axis2 has Improper Input Validation

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

December 4, 2025

🔗 CVE IDs covered (1)

CVE-2012-5785 →

📋 Description

Apache Axis2/Java 1.7.9 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

🎯 Affected products2

maven/org.apache.axis2:axis2:< 1.8.0
maven/org.apache.axis2:axis2-transport-http:< 1.8.0

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2012-5785
https://exchange.xforce.ibmcloud.com/vulnerabilities/79830
http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
https://issues.apache.org/jira/browse/AXIS2-6018
https://github.com/advisories/GHSA-wwq7-pxwc-p4rc