Description

The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.

Remediation

References

CVE-2011-2487

Related Vulnerabilities

Squid Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-18677)

WordPress Plugin GA Google Analytics Cross-Site Scripting (20210211)

MySQL CVE-2022-21285 Vulnerability (CVE-2022-21285)

PHP Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2011-0753)

Joomla Improper Privilege Management Vulnerability (CVE-2018-11323)

Severity

Medium

Classification

CVE-2011-2487 CWE-327 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities