Apache CXF CVE-2012-5633 Security Bypass Vulnerability

Bugtraq ID:	57874
Class:	Access Validation Error
CVE:	CVE-2012-5633
Remote:	Yes
Local:	No
Published:	Feb 11 2013 12:00AM
Updated:	Apr 16 2013 06:39PM
Credit:	Reported by the vendor
Vulnerable:	Red Hat JBoss Enterprise Web Platform 5 EL6 Red Hat JBoss Enterprise Web Platform 5 EL5 Red Hat JBoss Enterprise Web Platform 5 EL4 Red Hat JBoss Enterprise Application Platform 5 EL6 Red Hat JBoss Enterprise Application Platform 5 EL5 Red Hat JBoss Enterprise Application Platform 5 EL4
Not Vulnerable:

Apache CXF CVE-2012-5633 Security Bypass Vulnerability

Apache CXF is prone to a security-bypass vulnerability.

An attacker can exploit this issue to bypass certain security restrictions and gain unauthorized access; this may aid in launching further attacks.

Versions prior to Apache CXF 2.7.3, 2.6.6, and 2.5.9 are vulnerable.

Apache CXF CVE-2012-5633 Security Bypass Vulnerability

Attackers can exploit this issue using a browser or readily available tools.

Apache CXF CVE-2012-5633 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.

Apache CXF CVE-2012-5633 Security Bypass Vulnerability

References:

• Apache CXF (Apache Software Foundation)