Improper Access Control in Apache CXF

2022-05-1301:09:20

Google

osv.dev

0.001 Low

EPSS

Percentile

45.1%

JSON

The SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote authenticated users to bypass authentication via a crafted SAML response with a valid signed assertion, related to a “wrapping attack.”

CPENameOperatorVersion
org.apache.cxf:cxf-rt-rs-security-sso-samleq2.6.3
org.apache.cxf:cxf-rt-rs-security-sso-samleq3.1.2
org.apache.cxf:cxf-rt-rs-security-sso-samleq2.6.5
org.apache.cxf:cxf-rt-rs-security-sso-samleq2.6.10
org.apache.cxf:cxf-rt-rs-security-sso-samleq2.7.8
org.apache.cxf:cxf-rt-rs-security-sso-samleq2.7.13
org.apache.cxf:cxf-rt-rs-security-sso-samleq2.6.17
org.apache.cxf:cxf-rt-rs-security-sso-samleq2.6.6
org.apache.cxf:cxf-rt-rs-security-sso-samleq2.6.14
org.apache.cxf:cxf-rt-rs-security-sso-samleq2.7.15

Name	Operator	Version
org.apache.cxf:cxf-rt-rs-security-sso-saml	eq	2.6.3
org.apache.cxf:cxf-rt-rs-security-sso-saml	eq	3.1.2
org.apache.cxf:cxf-rt-rs-security-sso-saml	eq	2.6.5
org.apache.cxf:cxf-rt-rs-security-sso-saml	eq	2.6.10
org.apache.cxf:cxf-rt-rs-security-sso-saml	eq	2.7.8
org.apache.cxf:cxf-rt-rs-security-sso-saml	eq	2.7.13
org.apache.cxf:cxf-rt-rs-security-sso-saml	eq	2.6.17
org.apache.cxf:cxf-rt-rs-security-sso-saml	eq	2.6.6
org.apache.cxf:cxf-rt-rs-security-sso-saml	eq	2.6.14
org.apache.cxf:cxf-rt-rs-security-sso-saml	eq	2.7.15