Beveiligingsadvies

CVE-2017-5656

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-04-18 16:00:00

Laatst bijgewerkt 2024-08-05 15:11:48

Toegewezen door apache

CVSS-score geen score

Status PUBLISHED

Beschrijving

Apache CXF's STSClient before 3.1.11 and 3.0.13 uses a flawed way of caching tokens that are associated with delegation tokens, which means that an attacker could craft a token which would return an identifer corresponding to a cached token for another user.

← Alle CVE's bekijken Bekijk op cve.org ↗