Apache XML Security签名伪造漏洞

🗓️ 02 Jul 2013 00:00:00Reported by RootType

seebug

seebug🔗 www.seebug.org👁 50 Views

Apache XML Security签名伪造漏洞, CVE ID:CVE-2013-2172, XML签名规范化算法漏

Reporter	Title	Published	Views	Family All 82
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache XML Security for Java affects IBM Tivoli Business Service Manager (CVE-2013-4517, CVE-2013-2172, CVE-2009-0217, CVE-2021-40690)	6 Oct 202204:39	–	ibm
IBM Security Bulletins	Security Bulletin: A Vulnerability in Apache Santuario affects IBM Cúram (CVE-2013-2172)	7 Nov 201815:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to multiple security vulnerabilities	18 Feb 201914:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator vulnerable due to Apache Santuario XML Security for Java (CVE-2013-4517, CVE-2013-2172)	14 Oct 202221:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache Santuario XML Security for Java affect IBM InfoSphere Information Server	14 Oct 202222:24	–	ibm
Tenable Nessus	Oracle GlassFish Server 2.1.1 / 3.0.1 / 3.1.2 Multiple Vulnerabilities (October 2013 CPU)	26 Oct 201500:00	–	nessus
Tenable Nessus	Debian DLA-85-1 : libxml-security-java security update	26 Mar 201500:00	–	nessus
Tenable Nessus	Debian DSA-3065-1 : libxml-security-java - security update	7 Nov 201400:00	–	nessus
Tenable Nessus	Oracle GlassFish Server Multiple Vulnerabilities (October 2013 CPU)	17 Oct 201300:00	–	nessus
Tenable Nessus	RHEL 5 : Red Hat JBoss Enterprise Application Platform 6.1.1 update (Moderate) (RHSA-2013:1207)	13 Sep 201300:00	–	nessus

02 Jul 2013 00:00Current

0.4Low risk

Vulners AI Score0.4

EPSS0.03643

apache xml security digital signature canonicalizationmethod signedinfo apache santuario java cve-2013-2172 漏洞修复更新签名伪造安全标准漏洞利用