Description
The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.
Affected products and versions
| Product |
Affected versions |
Fixed in |
|
WSS4J
|
Versions not published
|
|
|
JBossWS
|
Versions not published
|
|