CVE-2015-0227

Apache WSS4J before 1.6.17 and 2.x before 2.0.2 allows remote attackers to bypass the requireSignedEncryptedDataElements configuration via a vectors related to "wrapping attacks."

Date published : 2015-02-12

http://www.securityfocus.com/bid/72557

http://ws.apache.org/wss4j/advisories/CVE-2015-0227.txt.asc