CVE-2015-3932 Netlock Mokka before 2.7.8.1204 allows remote attackers to perform XML signature wrapping attacks via an e-akta signed document with a ds:Object node with a crafted payload prepended to a valid ds:Obj...
HighCVSS 7.8
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Netlock Mokka before 2.7.8.1204 allows remote attackers to perform XML signature wrapping attacks via an e-akta signed document with a ds:Object node with a crafted payload prepended to a valid ds:Object.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netlock mokka | <= 2.7 | No fix listed |
References
- packetstormsecurity.com third-party-advisory vdb-entry
- www.neih.gov.hu third-party-advisory
- 75489 third-party-advisory vdb-entry
- www.search-lab.hu third-party-advisory
- www.search-lab.hu third-party-advisory