Beveiligingsadvies

CVE-2017-5653

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-04-18 16:00:00
Laatst bijgewerkt 2024-08-05 15:11:48
Toegewezen door apache
CVSS-score geen score
Status PUBLISHED

Beschrijving

JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encrypted, which allows remote attackers to spoof servers.