Wss4j@2.0.0 Security Vulnerabilities and Issues — Wss4j@2.0.0 CVE List

Lucene search

ApacheWss4j2.0.0

2 matches found

CVE•added 2017/10/30 2:29 p.m.•103 views

CVE-2015-0226

Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about decryption failures when decrypting an encrypted key or message data, which makes it easier for remote attackers to recover the plaintext form of a symmetric key via a series of crafted messages. NOTE: this vulnera...

7.5CVSS5.7AI score0.04622EPSS

CVE•added 2015/02/12 4:59 p.m.•83 views

CVE-2015-0227

Apache WSS4J before 1.6.17 and 2.x before 2.0.2 allows remote attackers to bypass the requireSignedEncryptedDataElements configuration via a vectors related to "wrapping attacks."

5CVSS6.2AI score0.17743EPSS