CVE-2011-2487

The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.

View graph Watch Export

CVSS v3.1

5.9 MEDIUM

EPSS

1.76%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

CVSS v3.1 Detail

Attack VectorNETWORK

Attack ComplexityHIGH

Privileges RequiredNONE

User InteractionNONE

ScopeUNCHANGED

ConfidentialityHIGH

IntegrityNONE

AvailabilityNONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Connections

11 relationships

jboss enterprise application platform

source

cxf

source

jboss middleware text-only advisories

source

jboss business rules management system

source

jboss portal

source

jboss enterprise application platform text-only advisories

source

wss4j

source

jboss enterprise soa platform

source

jboss enterprise web platform

source

jboss web services

source

Timeline

disclosure → media coverage

Mar 11, 2020

Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024