Apache Axis2 Vulnerable to XML Signature wrapping attack · CVE-2012-4418 · GitHub Advisory Database · GitHub

Apache Axis2 Vulnerable to XML Signature wrapping attack

Moderate severity GitHub Reviewed Published May 17, 2022 to the GitHub Advisory Database • Updated Jan 12, 2024

Package

org.apache.axis2:axis2 (Maven)

Affected versions

< 1.7.9

Patched versions

1.7.9

Description

Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."

References

Published by the National Vulnerability Database

Oct 9, 2012

Published to the GitHub Advisory Database May 17, 2022

Reviewed Jan 12, 2024

Last updated Jan 12, 2024