CVE-2011-2487

Published: Mar 11, 2020

Modified: Aug 6, 2024

PUBLISHED

Description

The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.

Vendor	Product	Versions
Apache	WSS4J	affected `before 1.6.5`
Red Hat	JBossWS	affected `unknown`

References

https://bugzilla.redhat.com/show_bug.cgi?id=713539

x_refsource_MISC

https://www.nds.ruhr-uni-bochum.de/research/publications/breaking-xml-encryption-pkcs15/

x_refsource_MISC

http://cxf.apache.org/note-on-cve-2011-2487.html

x_refsource_MISC

http://rhn.redhat.com/errata/RHSA-2013-0191.html

x_refsource_MISC

http://rhn.redhat.com/errata/RHSA-2013-0192.html

x_refsource_MISC

http://rhn.redhat.com/errata/RHSA-2013-0193.html

x_refsource_MISC

http://rhn.redhat.com/errata/RHSA-2013-0194.html

x_refsource_MISC

http://rhn.redhat.com/errata/RHSA-2013-0195.html

x_refsource_MISC

http://rhn.redhat.com/errata/RHSA-2013-0196.html

x_refsource_MISC

http://rhn.redhat.com/errata/RHSA-2013-0198.html

x_refsource_MISC

http://rhn.redhat.com/errata/RHSA-2013-0221.html

x_refsource_MISC

http://www.securityfocus.com/bid/57549

x_refsource_MISC

https://exchange.xforce.ibmcloud.com/vulnerabilities/81737

x_refsource_MISC

[cxf-commits] 20200319 svn commit: r1058035 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html

mailing-list

x_refsource_MLIST

[cxf-commits] 20200401 svn commit: r1058573 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2020-1954.txt.asc security-advisories.html

mailing-list

x_refsource_MLIST

[cxf-commits] 20201112 svn commit: r1067927 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2020-13954.txt.asc security-advisories.html

mailing-list

x_refsource_MLIST

[cxf-commits] 20210402 svn commit: r1073270 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2021-22696.txt.asc security-advisories.html

mailing-list

x_refsource_MLIST

[cxf-commits] 20210616 svn commit: r1075801 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2021-30468.txt.asc security-advisories.html

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2011-2487

Description

Affected Products

References