CVE-2012-5784 Man-in-the-middle attack in Apache Axis
MediumCVSS 5.8
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.apache.axis/axis(Maven) | <= 1.4 | No fix listed |
| axis/axis(Maven) | <= 1.4 | No fix listed |
| debian/axis(Debian:12) | < 1.4-16.1 | 1.4-16.1 |
| debian/axis(Debian:14) | < 1.4-16.1 | 1.4-16.1 |
| debian/axis(Debian:13) | < 1.4-16.1 | 1.4-16.1 |
| org.apache.axis/axis(Maven) | = 1.4 | No fix listed |
| axis/axis(Maven) | = 1.0 | No fix listed |
| axis/axis(Maven) | = 1.1 | No fix listed |
| axis/axis(Maven) | = 1.1-beta | No fix listed |
| axis/axis(Maven) | = 1.2 | No fix listed |
| axis/axis(Maven) | = 1.2-RC1 | No fix listed |
| axis/axis(Maven) | = 1.2-RC2 | No fix listed |
| axis/axis(Maven) | = 1.2-RC3 | No fix listed |
| axis/axis(Maven) | = 1.2-alpha-1 | No fix listed |
| axis/axis(Maven) | = 1.2-beta-2 | No fix listed |
| axis/axis(Maven) | = 1.2-beta-3 | No fix listed |
| axis/axis(Maven) | = 1.2.1 | No fix listed |
| axis/axis(Maven) | = 1.3 | No fix listed |
| axis/axis(Maven) | = 1.4 | No fix listed |
| apache activemq | <= 5.7.0 | No fix listed |
| apache axis | <= 1.4 | No fix listed |
| apache axis | All versions | No fix listed |
| apache axis | = 1.0 | No fix listed |
| apache axis | = 1.0-beta | No fix listed |
| apache axis | = 1.0-rc1 | No fix listed |
Show 18 more
| Product | Affected versions | Fixed in |
|---|---|---|
| apache axis | = 1.0-rc2 | No fix listed |
| apache axis | = 1.1 | No fix listed |
| apache axis | = 1.1-beta | No fix listed |
| apache axis | = 1.1-rc1 | No fix listed |
| apache axis | = 1.1-rc2 | No fix listed |
| apache axis | = 1.2 | No fix listed |
| apache axis | = 1.2-alpha | No fix listed |
| apache axis | = 1.2-beta1 | No fix listed |
| apache axis | = 1.2-beta2 | No fix listed |
| apache axis | = 1.2-beta3 | No fix listed |
| apache axis | = 1.2-rc1 | No fix listed |
| apache axis | = 1.2-rc2 | No fix listed |
| apache axis | = 1.2-rc3 | No fix listed |
| apache axis | = 1.2.1 | No fix listed |
| apache axis | = 1.3 | No fix listed |
| paypal mass pay | All versions | No fix listed |
| paypal payments pro | All versions | No fix listed |
| paypal transactional information soap | All versions | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- apache-axis-ssl-spoofing(79829) vdb-entry
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- openSUSE-SU-2019:1497 vendor-advisory
- openSUSE-SU-2019:1526 vendor-advisory
- RHSA-2013:0269 third-party-advisory vendor-advisory
- RHSA-2013:0683 third-party-advisory vendor-advisory
- RHSA-2014:0037 third-party-advisory vendor-advisory
- 51219 third-party-advisory
- www.cs.utexas.edu exploit technical-description
- 56408 third-party-advisory vdb-entry
- github.com
- Debian Security Tracker CVE-2012-5784 vendor-advisory
- bugs.debian.org issue-tracking
- [axis-java-dev] 20190503 [jira] [Commented] (AXIS-2905) Insecure certificate validation CVE-2014-3596 mailing-list
- [axis-java-dev] 20190909 [jira] [Commented] (AXIS-2905) Insecure certificate validation CVE-2014-3596 mailing-list
- [axis-java-dev] 20190907 [jira] [Commented] (AXIS-2905) Insecure certificate validation CVE-2014-3596 mailing-list
- [axis-java-dev] 20190909 [jira] [Resolved] (AXIS-2905) Insecure certificate validation CVE-2014-3596 mailing-list
- [axis-java-dev] 20190503 [jira] [Comment Edited] (AXIS-2905) Insecure certificate validation CVE-2014-3596 mailing-list