Lucene search
Ubuntu.comUB:CVE-2014-8152HistoryJan 21, 2015 - 12:00 a.m.
CVE-2014-8152
2015-01-2100:00:00
ubuntu.com
ubuntu.com
11
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
60.1%
Apache Santuario XML Security for Java 2.0.x before 2.0.3 allows remote
attackers to bypass the streaming XML signature protection mechanism via a
crafted XML document.
Notes
| Author | Note |
|---|---|
| seth-arnold | bug introduced in 2.x branch |
Related
cve
cve
CVE-2014-8152
2015-01-21 18:59:04
veracode
veracode
Bypass XML Signature Protection Mechanism
2016-12-08 05:23:44
prion
prion
Authentication flaw
2015-01-21 18:59:00
osv
osv
Improper Input Validation in Apache Santuario XML Security
2022-05-13 01:05:55
nvd
nvd
CVE-2014-8152
2015-01-21 18:59:04
cvelist
cvelist
CVE-2014-8152
2015-01-21 18:00:00
github
github
Improper Input Validation in Apache Santuario XML Security
2022-05-13 01:05:55
debiancve
debiancve
CVE-2014-8152
2015-01-21 18:59:04
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
60.1%
Related for UB:CVE-2014-8152