CVE-2011-2487

The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.

Date published : 2020-03-11

http://cxf.apache.org/note-on-cve-2011-2487.html

http://rhn.redhat.com/errata/RHSA-2013-0191.html