CVE-2011-2487

MEDIUM5.9EPSS 0.49%

Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J

發布日:2022/4/22修改日:2026/4/16
也稱為:GHSA-4qqf-hmv6-r6wh

描述

The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.

受影響套件(2)

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1MEDIUM5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

參考連結(36)