4 matches found
Design/Logic Flaw
The ramparttimestamptokenvalidate function in util/ramparttimestamptoken.c in Apache Rampart/C 1.3.0 does not properly calculate the expiration of timestamp tokens, which allows remote attackers to bypass intended access restrictions by leveraging an expired token, a different vulnerability than...
CVE-2011-2329
CVE-2011-2329 relates to Apache Rampart/C 1.3.0 where the rampart_timestamp_token_validate function miscomputes the expiration of timestamp tokens. This allows remote attackers to bypass access restrictions by leveraging an expired token (not related to CVE-2011-0730). The connected records confi...
PT-2011-3777
Name of the Vulnerable Software and Affected Versions Apache Rampart/C version 1.3.0 Description The issue is related to the improper calculation of the expiration of timestamp tokens by the rampart timestamp token validate function. This allows remote attackers to bypass intended access...
CVE-2011-2329: Undefined Security Weakness
The ramparttimestamptokenvalidate function in util/ramparttimestamptoken.c in Apache Rampart/C 1.3.0 does not properly calculate the expiration of timestamp tokens, which allows remote attackers to bypass intended access restrictions by leveraging an expired token, a different vulnerability than...