CVE-2014-0107 Improper Authorization in Apache Xalan-Java
HighCVSS 7.5
EPSS 14.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, which allows remote attackers to bypass expected restrictions and load arbitrary classes or access external resources via a crafted (1) xalan:content-header, (2) xalan:entities, (3) xslt:content-header, or (4) xslt:entities property, or a Java property that is bound to the XSLT 1.0 system-property function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xalan/xalan(Maven) | < 2.7.2 | 2.7.2 |
| xalan/xalan(Maven) | = 2.1.0 | No fix listed |
| xalan/xalan(Maven) | = 2.3.1 | No fix listed |
| xalan/xalan(Maven) | = 2.4.0 | No fix listed |
| xalan/xalan(Maven) | = 2.4.1 | No fix listed |
| xalan/xalan(Maven) | = 2.5.0 | No fix listed |
| xalan/xalan(Maven) | = 2.5.1 | No fix listed |
| xalan/xalan(Maven) | = 2.5.D1 | No fix listed |
| xalan/xalan(Maven) | = 2.6.0 | No fix listed |
| xalan/xalan(Maven) | = 2.7.0 | No fix listed |
| xalan/xalan(Maven) | = 2.7.1 | No fix listed |
| debian/libxalan2-java(Debian:12) | < 2.7.1-9 | 2.7.1-9 |
| debian/libxalan2-java(Debian:13) | < 2.7.1-9 | 2.7.1-9 |
| debian/libxalan2-java(Debian:14) | < 2.7.1-9 | 2.7.1-9 |
| apache xalan-java | <= 2.7.1 | No fix listed |
| apache xalan-java | = 1.0.0 | No fix listed |
| apache xalan-java | = 2.0.0 | No fix listed |
| apache xalan-java | = 2.0.1 | No fix listed |
| apache xalan-java | = 2.1.0 | No fix listed |
| apache xalan-java | = 2.2.0 | No fix listed |
| apache xalan-java | = 2.4.0 | No fix listed |
| apache xalan-java | = 2.4.1 | No fix listed |
| apache xalan-java | = 2.5.0 | No fix listed |
| apache xalan-java | = 2.5.1 | No fix listed |
| apache xalan-java | = 2.5.2 | No fix listed |
Show 4 more
| Product | Affected versions | Fixed in |
|---|---|---|
| apache xalan-java | = 2.6.0 | No fix listed |
| apache xalan-java | = 2.7.0 | No fix listed |
| oracle webcenter sites | = 7.6.2 | No fix listed |
| oracle webcenter sites | = 11.1.1.8.0 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- apache-xalanjava-cve20140107-sec-bypass(92023) vdb-entry
- github.com product
- h20566.www2.hpe.com
- issues.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- lists.apache.org
- GLSA-201604-02 vendor-advisory
- www.oracle.com
- www.oracle.com
- www.oracle.com
- www.tenable.com
- RHSA-2014:0348 vendor-advisory
- RHSA-2014:1351 vendor-advisory
- RHSA-2015:1888 vendor-advisory
- svn.apache.org patch
- www-01.ibm.com
- www-01.ibm.com
- www-01.ibm.com
- www-01.ibm.com
- www-01.ibm.com
- DSA-2886 vendor-advisory
- www.ibm.com
- www.ocert.org us-government-resource
- www.oracle.com
- www.oracle.com patch vendor-advisory
- Debian Security Tracker CVE-2014-0107 vendor-advisory
- 57563 third-party-advisory
- 59036 third-party-advisory
- 59151 third-party-advisory
- 59247 third-party-advisory
- 59290 third-party-advisory
- 59291 third-party-advisory
- 59369 third-party-advisory
- 59515 third-party-advisory
- 59711 third-party-advisory
- 60502 third-party-advisory
- 66397 vdb-entry
- 1034711 vdb-entry
- 1034716 vdb-entry
- [drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities mailing-list
- [drill-dev] 20191017 Dependencies used by Drill contain known vulnerabilities mailing-list
- [tomcat-dev] 20210823 [Bug 65516] New: upgrade to xalan 2.7.2 to address CVE-2014-0107 mailing-list
- [tomcat-dev] 20210823 [Bug 65516] upgrade to xalan 2.7.2 to address CVE-2014-0107 mailing-list
- github.com
- bugs.debian.org issue-tracking