Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Apache Axis2 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack," a different vulnerability than CVE-2012-4418.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Axis2 授权问题漏洞
Vulnerability Description
Apache Axis2 是一个Web服务的核心支援引擎。AXIS2对旧有的AXIS重新设计及重写，并提供两种语言Java 及 C 的开发版本。 Apache Axis2版本中存在漏洞。远程攻击者可利用该漏洞通过缺少签名元素的SAML声明，伪造消息并绕过身份验证，又名‘签名排除攻击’。
CVSS Information
N/A
Vulnerability Type
N/A