Genivia gSOAP WS-Security plugin denial-of-service vulnerability

🗓️ 05 Jan 2021 00:00:00Reported by Talos IntelligenceType

talos🔗 www.talosintelligence.com👁 170 Views

Denial-of-service vulnerability in Genivia gSOAP WS-Security plugin 2.8.107 can be triggered by a specially crafted SOAP request, potentially leading to a crash

Reporter	Title	Published	Views	Family All 48
IBM Security Bulletins	Security Bulletin: Genivia gSOAP vulnerabilities affect IBM Spectrum Protect for Virtual Environments:Data Protection for VMware and Spectrum Protect Client (CVE-2020-13575, CVE-2020-13578, CVE-2020-13574, CVE-2020-13577, CVE-2020-13576, CVE-2020-21783)	15 Jun 202101:00	–	ibm
BDU FSTEC	The vulnerability of the WS-Addressing plugin in the gSOAP web service development environment allows a attacker to cause a service failure.	16 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WS-Addressing plugin in the gSOAP software development environment allows a perpetrator to execute arbitrary code.	16 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WS-Addressing plugin in the gSOAP software development environment allows a attacker to trigger a service failure.	16 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WS-Security plugin in the gSOAP software development environment allows a attacker to cause a service failure.	16 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WS-Addressing plugin in the gSOAP software development environment allows a attacker to trigger a service failure.	16 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WS-Addressing plugin in the gSOAP software development environment allows a perpetrator to execute arbitrary code.	16 Dec 202100:00	–	bdu_fstec
Circl	CVE-2020-13578	6 Jan 202111:05	–	circl
CNNVD	Genivia gSOAP 代码问题漏洞	5 Jan 202100:00	–	cnnvd
CNNVD	Genivia gSOAP 代码问题漏洞	5 Jan 202100:00	–	cnnvd

05 Jan 2021 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 25

CVSS 3.17.5

CVSS 37.5

EPSS0.00153

SSVC