apache cxf CVE-2014-0035 in Apache and Red Hat Products
Published on July 7, 2014

product logo product logo
The SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning is enabled and the UsernameToken policy is set to an EncryptedSupportingToken, transmits the UsernameToken in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2014-0035

stack.watch emails you whenever new vulnerabilities are published in Apache CXF or Red Hat Jboss Enterprise Application Platform. Just hit a watch button to start following.

Apache CXF
 
Red Hat Jboss Enterprise Application Platform
 

Exploit Probability

EPSS
0.96%
Percentile
76.15%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.