PT-2016-5964 · Apache · Apache Cxf Fediz

Colm O Heigeartaigh · Published 2016-07-05 · Updated 2021-06-16 · CVE-2016-4464

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache CXF Fediz versions 1.2.x through 1.2.2 Apache CXF Fediz versions 1.3.x through 1.3.0

Description The issue is related to the application plugins in Apache CXF Fediz, where SAML AudienceRestriction values are not properly matched against configured audience URIs. This could allow remote attackers to bypass intended restrictions by using a crafted SAML token with a trusted signature.

Recommendations For Apache CXF Fediz versions 1.2.x through 1.2.2, update to version 1.2.3 or later. For Apache CXF Fediz versions 1.3.x through 1.3.0, update to version 1.3.1 or later.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2016-4464

GHSA-QPWJ-MVV7-V3M9

MGASA-2016-0243

Affected Products

Apache Cxf Fediz

References · 26

• http://cxf.apache.org/security-advisories.data/CVE-2016-4464.txt.asc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-4464 · Security Note
• https://osv.dev/vulnerability/MGASA-2016-0243 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2016-0243.html · Security Note
• https://osv.dev/vulnerability/GHSA-qpwj-mvv7-v3m9 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-4464 · Vendor Advisory
• https://bugs.mageia.org/show_bug.cgi?id=18818 · Note
• https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E · Note
• https://git-wip-us.apache.org/repos/asf?p=cxf-fediz.git;a=commit;h=0006581e9cacbeef46381a223e5671e524d416b6 · Note
• https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E · Note
• https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E · Note
• https://github.com/advisories/GHSA-qpwj-mvv7-v3m9 · Note
• https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E · Note
• http://securityfocus.com/bid/92905 · Note
• https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E · Note