Unscored CVE-2012-4063 EUVD-2012-4007GHSA-c3c5-hgp3-g35x

The Apache Santuario configuration in Eucalyptus before 3.1.1 does not properly restrict applying XML Signature transforms to documents, wh…

Published Oct 1, 2012 · Updated Aug 6, 2024 · Assigned by mitre

Description

The Apache Santuario configuration in Eucalyptus before 3.1.1 does not properly restrict applying XML Signature transforms to documents, which allows remote attackers to cause a denial of service via unspecified vectors.

References

eucalyptus-santuario-dos(78617) vdb-entry
http://www.eucalyptus.com/eucalyptus-cloud/security/esa-05