CVE-2012-5786

CVE-2012-5786 describes a vulnerability in the wsdl_first_https sample code within Apache CXF versions prior to 2.7.0. This flaw allows man-in-the-middle attackers to spoof SSL servers because the sample code fails to verify that the server's hostname matches the domain name in the X.509 certificate. With a CVSS score of 5.8, this vulnerability has a medium severity, requiring moderate attack complexity (AC:M) and potentially leading to partial confidentiality and integrity impacts (C:P/I:P). There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.