网安资讯详情 - SecLens 情报雷达

Apache CXF LDAP Injection Vulnerability in Some Huawei Products

来源： huawei_security · 发布时间 2026-07-22 08:00 (UTC+08:00) · 抓取时间 2026-07-22 21:42 (UTC+08:00)

摘要

The open-source software Apache CXF used by some Huawei products has an LDAP Injection vulnerability in the LDAP Certificate repository of the XKMS server. Successful exploitation of this vulnerability may allow attackers to retrieve arbitrary certificates from the repository. (Vulnerability ID:HWPSIRT-2026-42762) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID:CVE-2026-44930

标签

• Critical

扩展字段

{
  "hw_psirt_ids": [
    "HWPSIRT-2026-42762"
  ],
  "language": "en",
  "sasn_no": "huawei-sa-ACLIViSHP-33812386",
  "sasn_version": "1.2",
  "severity": "Critical",
  "vulnerabilities": [
    {
      "cveId": "CVE-2026-44930",
      "hwPsirtId": "HWPSIRT-2026-42762"
    }
  ]
}