CyberRota Analysis
AI-GeneratedCoreWCF versions prior to 1.8.1 and 1.9.1 are vulnerable to a security flaw that allows unauthenticated remote attackers to manipulate SOAP headers, potentially leading to the verification of malicious signatures instead of legitimate ones. This could compromise the integrity of the communication, making it critical for organizations using affected Windows products to prioritize upgrading to the patched versions. Users of CoreWCF in environments where secure communication is essential should address this vulnerability promptly to mitigate risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF WS-Security signature verification performs a document-wide ds:Signature lookup, allowing an unauthenticated remote attacker to place a SOAP header before wsse:Security and cause WSSecurityOneDotZeroReceiveSecurityHeader to verify an attacker-supplied signature instead of the security header signature. This issue is fixed in versions 1.8.1 and 1.9.1.