Apache CXF prior to 3.3.4 and 3.2.11 provides all of the components that are required to build a fully fledged OpenId Connect service. There is a vulnerability in the access token services, where it does not validate that the authenticated principal is equal to that of the supplied clientId parameter in the request. If a malicious client was able to somehow steal an authorization code issued to another client, then they could exploit this vulnerability to obtain an access token for the other client.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
apache cxf |
||
oracle commerce guided search 11.3.2 |
||
oracle enterprise manager base platform 13.2.1.0 |
||
oracle flexcube private banking 12.0.0 |
||
oracle flexcube private banking 12.1.0 |
||
oracle retail order broker 15.0 |
Vulmon