CVE-2014-8152

Published: Jan 21, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Apache Santuario XML Security for Java 2.0.x before 2.0.3 allows remote attackers to bypass the streaming XML signature protection mechanism via a crafted XML document.

Affected (3)

Products: Apache: Santuario Xml Security For Java

1 product

Santuario Xml Security For Java

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Apache Santuario Xml Security For Java	Version 2.0.0
Apache Santuario Xml Security For Java	Version 2.0.1
Apache Santuario Xml Security For Java	Version 2.0.2

Related CWEs

References (14)

http://santuario.apache.org/secadv.data/CVE-2014-8152.txt.asc

Source: secalert@redhat.com

Vendor Advisory

http://seclists.org/oss-sec/2015/q1/181

Source: secalert@redhat.com

http://www.securityfocus.com/bid/72115

Source: secalert@redhat.com

http://www.securitytracker.com/id/1031556

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/99993

Source: secalert@redhat.com

https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3%40%3Ccommits.santuario.apache.org%3E

Source: secalert@redhat.com

https://lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd%40%3Ccommits.santuario.apache.org%3E

Source: secalert@redhat.com

http://santuario.apache.org/secadv.data/CVE-2014-8152.txt.asc

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://seclists.org/oss-sec/2015/q1/181

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/72115

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1031556

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/99993

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3%40%3Ccommits.santuario.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd%40%3Ccommits.santuario.apache.org%3E

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.