Lucene search

K
nvd[email protected]NVD:CVE-2012-4418
HistoryOct 09, 2012 - 11:55 p.m.

CVE-2012-4418

2012-10-0923:55:05
CWE-287
web.nvd.nist.gov
3

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

9.6

Confidence

High

EPSS

0.004

Percentile

72.3%

Apache Axis2 allows remote attackers to forge messages and bypass authentication via an “XML Signature wrapping attack.”

Affected configurations

Nvd
Node
apacheaxis2Match-
VendorProductVersionCPE
apacheaxis2-cpe:2.3:a:apache:axis2:-:*:*:*:*:*:*:*

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

9.6

Confidence

High

EPSS

0.004

Percentile

72.3%