// For flags

CVE-2013-2172

Java: XML signature spoofing

Severity Score

4.3
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak "canonicalization algorithm to apply to the SignedInfo part of the Signature."

jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java en Apache Santuario XML Security para Java 1.4.x anterior a 1.4.8 y 1.5.x anterior a 1.5.5 , permite a atacantes dependientes del contexto suplantar una firma XML utilizando el parámetro "CanonicalizationMethod" para especificar la debilidad arbitraria: "canonización del algoritmo a aplicar para la parte SignedInfo de la firma".

A flaw was found in the way Apache Santuario XML Security for Java validated XML signatures. Santuario allowed a signature to specify an arbitrary canonicalization algorithm, which would be applied to the SignedInfo XML fragment. A remote attacker could exploit this to spoof an XML signature via a specially crafted XML signature block.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
None
Integrity
Partial
Availability
None
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2013-02-19 CVE Reserved
  • 2013-08-20 CVE Published
  • 2024-05-07 EPSS Updated
  • 2024-08-06 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-290: Authentication Bypass by Spoofing
  • CWE-310: Cryptographic Issues
CAPEC
References (26)
URL Tag Source
http://seclists.org/fulldisclosure/2014/Dec/23 Mailing List
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html X_refsource_confirm
http://www.osvdb.org/94651 Vdb Entry
http://www.securityfocus.com/archive/1/534161/100/0/threaded Mailing List
http://www.securityfocus.com/bid/60846 Vdb Entry
http://www.vmware.com/security/advisories/VMSA-2014-0012.html X_refsource_confirm
https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3%40%3Ccommits.santuario.apache.org%3E Mailing List
https://lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd%40%3Ccommits.santuario.apache.org%3E Mailing List
URL Date SRC
URL Date SRC
http://svn.apache.org/viewvc/santuario/xml-security-java/branches/1.5.x-fixes/src/main/java/org/apache/jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java?r1=1353876&r2=1493772&pathrev=1493772&diff_format=h 2023-04-18
URL Date SRC
http://rhn.redhat.com/errata/RHSA-2013-1207.html 2023-04-18
http://rhn.redhat.com/errata/RHSA-2013-1208.html 2023-04-18
http://rhn.redhat.com/errata/RHSA-2013-1209.html 2023-04-18
http://rhn.redhat.com/errata/RHSA-2013-1217.html 2023-04-18
http://rhn.redhat.com/errata/RHSA-2013-1218.html 2023-04-18
http://rhn.redhat.com/errata/RHSA-2013-1219.html 2023-04-18
http://rhn.redhat.com/errata/RHSA-2013-1220.html 2023-04-18
http://rhn.redhat.com/errata/RHSA-2013-1375.html 2023-04-18
http://rhn.redhat.com/errata/RHSA-2013-1437.html 2023-04-18
http://rhn.redhat.com/errata/RHSA-2013-1853.html 2023-04-18
http://rhn.redhat.com/errata/RHSA-2014-0212.html 2023-04-18
http://santuario.apache.org/secadv.data/CVE-2013-2172.txt.asc 2023-04-18
http://secunia.com/advisories/54019 2023-04-18
http://www.debian.org/security/2014/dsa-3065 2023-04-18
http://www.ubuntu.com/usn/USN-2028-1 2023-04-18
https://access.redhat.com/security/cve/CVE-2013-2172 2014-10-09
https://bugzilla.redhat.com/show_bug.cgi?id=999263 2014-10-09
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Apache
Search vendor "Apache"
 Santuario Xml Security For Java
Search vendor "Apache" for product "Santuario Xml Security For Java"
 1.4.7
Search vendor "Apache" for product "Santuario Xml Security For Java" and version "1.4.7"
-
Affected
Apache
Search vendor "Apache"
 Santuario Xml Security For Java
Search vendor "Apache" for product "Santuario Xml Security For Java"
 1.5.0
Search vendor "Apache" for product "Santuario Xml Security For Java" and version "1.5.0"
-
Affected
Apache
Search vendor "Apache"
 Santuario Xml Security For Java
Search vendor "Apache" for product "Santuario Xml Security For Java"
 1.5.1
Search vendor "Apache" for product "Santuario Xml Security For Java" and version "1.5.1"
-
Affected
Apache
Search vendor "Apache"
 Santuario Xml Security For Java
Search vendor "Apache" for product "Santuario Xml Security For Java"
 1.5.2
Search vendor "Apache" for product "Santuario Xml Security For Java" and version "1.5.2"
-
Affected
Apache
Search vendor "Apache"
 Santuario Xml Security For Java
Search vendor "Apache" for product "Santuario Xml Security For Java"
 1.5.3
Search vendor "Apache" for product "Santuario Xml Security For Java" and version "1.5.3"
-
Affected
Apache
Search vendor "Apache"
 Santuario Xml Security For Java
Search vendor "Apache" for product "Santuario Xml Security For Java"
 1.5.4
Search vendor "Apache" for product "Santuario Xml Security For Java" and version "1.5.4"
-
Affected