Session Fixation in Apache CXF

2022-05-1301:09:19

Google

osv.dev

0.003 Low

EPSS

Percentile

65.4%

JSON

Apache CXF’s STSClient before 3.1.11 and 3.0.13 uses a flawed way of caching tokens that are associated with delegation tokens, which means that an attacker could craft a token which would return an identifer corresponding to a cached token for another user.

CPENameOperatorVersion
org.apache.cxf:cxf-coreeq3.1.0
org.apache.cxf:cxf-coreeq3.1.4
org.apache.cxf:cxf-coreeq3.1.7
org.apache.cxf:cxf-coreeq3.0.9
org.apache.cxf:cxf-coreeq3.0.6
org.apache.cxf:cxf-coreeq3.0.3
org.apache.cxf:cxf-coreeq3.0.10
org.apache.cxf:cxf-coreeq3.0.0-milestone1
org.apache.cxf:cxf-coreeq3.1.8
org.apache.cxf:cxf-coreeq3.0.11

Name	Operator	Version
org.apache.cxf:cxf-core	eq	3.1.0
org.apache.cxf:cxf-core	eq	3.1.4
org.apache.cxf:cxf-core	eq	3.1.7
org.apache.cxf:cxf-core	eq	3.0.9
org.apache.cxf:cxf-core	eq	3.0.6
org.apache.cxf:cxf-core	eq	3.0.3
org.apache.cxf:cxf-core	eq	3.0.10
org.apache.cxf:cxf-core	eq	3.0.0-milestone1
org.apache.cxf:cxf-core	eq	3.1.8
org.apache.cxf:cxf-core	eq	3.0.11