Bug 2511995 (CVE-2026-65583)
| Summary: | CVE-2026-65583 org.apache.cxf/cxf: Apache CXF: Authentication Bypass via Crafted OIDC Self-Issued ID Tokens | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security <prodsec-ir-bot> |
| Status: | NEW --- | QA Contact: | |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | unspecified | CC: | anujha, asoldano, bbaranow, bmaxwell, bstansbe, csutherl, dlofthou, dsoumis, fmariani, gmalinko, istudens, ivassile, iweiss, janstey, jclere, jwon, mcarlett, mosmerov, msvehla, nwallace, pberan, pesilva, pjindal, plodge, pmackay, rmaucher, rstancel, rstepani, szappis, tcunning, thjenkin, vdosoudi, yfang |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in Apache CXF. The OpenID Connect (OIDC) relying-party token validation in Apache CXF could accept specially crafted self-issued ID tokens. This bypasses necessary claim checks, such as issuer, subject, audience, and time, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by presenting a malicious token.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OSIDB Bzimport
2026-08-06 11:52:18 UTC
|