CVE-2012-5575

CVE-2012-5575 describes a vulnerability in Apache CXF versions 2.5.x, 2.6.x, and 2.7.x where the software fails to validate cryptographic algorithms against WS-SecurityPolicy AlgorithmSuite definitions before decryption. This oversight allows remote attackers to force the use of weaker algorithms, facilitating decryption of communications. With a CVSS score of 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N), this vulnerability is of medium severity, indicating it can be exploited remotely with low complexity to achieve partial confidentiality and integrity impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.