Bug 2548454 (CVE-2026-100227)
| Summary: | CVE-2026-100227 org.apache.cxf/cxf-rt-rs-security-xml: Apache CXF: Cryptographic signature verification bypass via unsigned XML wrapping | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security <prodsec-ir-bot> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | csutherl, dsoumis, fmariani, gmalinko, janstey, jclere, jwon, mcarlett, pdelbell, pjindal, plodge, rmaucher, rstepani, szappis, tcunning, yfang |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in Apache CXF's JAX-RS XML Security module. The XML signature interceptors fail to properly verify that all XML content forwarded to the application is covered by the cryptographic signature. An attacker possessing any document signed by a trusted key can wrap it in unsigned content, causing the application to treat the unsigned content as legitimately signed and bypassing security verification controls.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OSIDB Bzimport
2026-10-09 10:31:22 UTC
|