PUBLISHED
2026-06-12 10:16
MODIFIED
2026-06-12 10:16
EPSS (Prob. Exploit)
4.52%
Top 8.5%
> DESCRIPTION
The JwtAccessTokenValidator class in Apache CXF fails to validate the 'aud' (Audience) claims of incoming JWT access tokens. This allows a JWT issued for one Resource Server to be successfully replayed against a completely different Resource Server, leading to Token Confusion/Routing attacks. Users are recommended to upgrade to versions 4.2.2 or 4.1.7, which fixes this issue.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-289: Authentication Bypass by Alternate Name - The product performs authentication based on the name of a resource being accessed, or the name of the actor performing the access, but it does not properly check all possible names for that resource or actor.
> RED HAT SECURITY ADVISORIES
Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18.1.P1 for Spring Boot release.
Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot patch release and security update is now available.
Red Hat Product Security has rated this update as having a security impact of
Important. A...
> GITHUB SECURITY ADVISORY
GHSA-9mrv-8pvf-hf4m
CRITICAL
Apache CXF OAuth2 Missing JWT Audience and Issuer Validation in Access Token Validator
AFFECTED PACKAGES:
MAVEN / org.apache.cxf:cxf-rt-rs-security-oauth2
< 4.1.7
Fixed in: 4.1.7
MAVEN / org.apache.cxf:cxf-rt-rs-security-oauth2
>= 4.2.0, < 4.2.2
Fixed in: 4.2.2
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
Apache CXF: OAuth2: Missing JWT Audience and Issuer Validation in Access Token Validator
AFFECTED PACKAGES:
Unknown / Unknown
48 versions affected
ALIASES:
GHSA-9mrv-8pvf-hf4m
> HISTORIQUE DES MODIFICATIONS
Première apparition
12/06/2026 10:16
Source: NVD
📊
ENRICHISSEMENT
01/07/2026 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-289: Authentication Bypass by Alternate Name - The product performs authentication based on the name of a resource being accessed, or the name of the actor performing the access, but it does not p...
Total des modifications: 1
Dernière mise à jour: 4 months ago