Vulnerability CVE-2014-3623 - CERT Civis.Net

Vulnerability Name:

CVE-2014-3623 (CCN-97754)

Assigned:

2014-10-24

Published:

2014-10-24

Updated:

2021-06-16

Summary:

Apache WSS4J before 1.6.17 and 2.x before 2.0.2, as used in Apache CXF 2.7.x before 2.7.13 and 3.0.x before 3.0.2, when using TransportBinding, does not properly enforce the SAML SubjectConfirmation method security semantics, which allows remote attackers to conduct spoofing attacks via unspecified vectors.

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N)
3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

Vulnerability Type:

Vulnerability Consequences:

Bypass Security

References:

Source: MITRE
Type: CNA
CVE-2014-3623

Source: CCN
Type: Apache Web site
Apache CXF does not properly enforce the security semantics of SAML SubjectConfirmation methods when used with the TransportBinding

Source: CCN
Type: RHSA-2014-2019
Important: Red Hat JBoss Enterprise Application Platform 6.3.2 security update

Source: REDHAT
Type: Third Party Advisory
RHSA-2015:0236

Source: REDHAT
Type: Third Party Advisory
RHSA-2015:0675

Source: REDHAT
Type: Third Party Advisory
RHSA-2015:0850

Source: REDHAT
Type: Third Party Advisory
RHSA-2015:0851

Source: CCN
Type: oss-security Mailing List, Fri, 24 Oct 2014 19:10:21 +0100
New security advisories released for Apache CXF

Source: MLIST
Type: Mailing List, Third Party Advisory
[oss-security] 20141024 New security advisories released for Apache CXF

Source: SECUNIA
Type: Third Party Advisory
61909

Source: BID
Type: Third Party Advisory, VDB Entry
70736

Source: CCN
Type: BID-70736
Apache CXF SAML SubjectConfirmation Security Bypass Vulnerability

Source: XF
Type: UNKNOWN
apache-cxf-cve20143623-sec-bypass(97754)

Source: XF
Type: VDB Entry
apache-cxf-cve20143623-sec-bypass(97754)

Source: CONFIRM
Type: Vendor Advisory
https://issues.apache.org/jira/browse/WSS-511

Source: MLIST
Type: UNKNOWN
[cxf-commits] 20200319 svn commit: r1058035 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html

Source: MLIST
Type: UNKNOWN
[cxf-commits] 20200116 svn commit: r1055336 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-12423.txt.asc security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html

Source: MLIST
Type: UNKNOWN
[cxf-commits] 20201112 svn commit: r1067927 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2020-13954.txt.asc security-advisories.html

Source: MLIST
Type: UNKNOWN
[cxf-commits] 20210402 svn commit: r1073270 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2021-22696.txt.asc security-advisories.html

Source: MLIST
Type: UNKNOWN
[cxf-commits] 20210616 svn commit: r1075801 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2021-30468.txt.asc security-advisories.html

Source: MLIST
Type: UNKNOWN
[cxf-commits] 20200401 svn commit: r1058573 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2020-1954.txt.asc security-advisories.html

Source: CCN
Type: IBM Security Bulletin 6826625 (Tivoli Business Service Manager)
A vulnerability in Apache WSS4J affects IBM Tivoli Business Service Manager (CVE-2014-3623)

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2014-3623

Vulnerable Configuration:

Configuration 1:

cpe:/a:apache:wss4j:*:*:*:*:*:*:*:* (Version < 1.6.17)

OR cpe:/a:apache:wss4j:*:*:*:*:*:*:*:* (Version >= 2.0.0 and < 2.0.2)

Configuration 2:

cpe:/a:apache:cxf:*:*:*:*:*:*:*:* (Version >= 2.7.0 and <= 2.7.13)

OR cpe:/a:apache:cxf:*:*:*:*:*:*:*:* (Version >= 3.0.0 and < 3.0.2)

Configuration CCN 1:

cpe:/a:apache:cxf:2.7.9:*:*:*:*:*:*:*

OR cpe:/a:apache:cxf:2.7.7:*:*:*:*:*:*:*

OR cpe:/a:apache:cxf:2.7.6:*:*:*:*:*:*:*

OR cpe:/a:apache:cxf:2.7.5:*:*:*:*:*:*:*

OR cpe:/a:apache:cxf:2.7.4:*:*:*:*:*:*:*

OR cpe:/a:apache:cxf:2.7.0:*:*:*:*:*:*:*

OR cpe:/a:apache:cxf:2.7.1:*:*:*:*:*:*:*

OR cpe:/a:apache:cxf:2.7.2:*:*:*:*:*:*:*

OR cpe:/a:apache:cxf:2.7.3:*:*:*:*:*:*:*

OR cpe:/a:apache:cxf:2.6.10:*:*:*:*:*:*:*

OR cpe:/a:apache:cxf:2.6.9:*:*:*:*:*:*:*

OR cpe:/a:apache:cxf:2.6.8:*:*:*:*:*:*:*

OR cpe:/a:apache:cxf:2.6.7:*:*:*:*:*:*:*

OR cpe:/a:apache:cxf:2.6.6:*:*:*:*:*:*:*

OR cpe:/a:apache:cxf:2.6.5:*:*:*:*:*:*:*

OR cpe:/a:apache:cxf:2.6.4:*:*:*:*:*:*:*

OR cpe:/a:apache:cxf:2.6.3:*:*:*:*:*:*:*

OR cpe:/a:apache:cxf:2.6.2:*:*:*:*:*:*:*

AND

cpe:/o:redhat:enterprise_linux_workstation:6:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_business_service_manager:6.2.0:*:*:*:*:*:*:*

Denotes that component is vulnerable