http://cxf.apache.org/note-on-cve-2011-2487.html

http://rhn.redhat.com/errata/RHSA-2013-0191.html

http://rhn.redhat.com/errata/RHSA-2013-0192.html

http://rhn.redhat.com/errata/RHSA-2013-0193.html

http://rhn.redhat.com/errata/RHSA-2013-0194.html

http://rhn.redhat.com/errata/RHSA-2013-0195.html

http://rhn.redhat.com/errata/RHSA-2013-0196.html

http://rhn.redhat.com/errata/RHSA-2013-0198.html

http://rhn.redhat.com/errata/RHSA-2013-0221.html

http://www.securityfocus.com/bid/57549

https://bugzilla.redhat.com/show_bug.cgi?id=713539

https://exchange.xforce.ibmcloud.com/vulnerabilities/81737

https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E

https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E

https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E

https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E

https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E

https://www.nds.ruhr-uni-bochum.de/research/publications/breaking-xml-encryption-pkcs15/

A flaw was found in JBoss web services where the services used a weak symmetric encryption protocol, PKCS#1 v1.5. An attacker could use this weakness in chosen-ciphertext attacks to recover the symmetric key and conduct further attacks.

The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.

Red Hat, Inc. (AV:N/AC:L/Au:N/C:C/I:N/A:N)

https://access.redhat.com/errata/RHSA-2013:0191 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2013:0192 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2013:0193 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2013:0194 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2013:0195 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2013:0196 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2013:0197 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2013:0198 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2013:0221 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2013:0533 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2013:0953 [No Types Assigned]

https://access.redhat.com/security/cve/CVE-2011-2487 [No Types Assigned]

The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.

A flaw was found in JBoss web services where the services used a weak symmetric encryption protocol, PKCS#1 v1.5. An attacker could use this weakness in chosen-ciphertext attacks to recover the symmetric key and conduct further attacks.

Red Hat, Inc. (AV:N/AC:L/Au:N/C:C/I:N/A:N)

https://access.redhat.com/errata/RHSA-2013:0191 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2013:0192 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2013:0193 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2013:0194 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2013:0195 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2013:0196 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2013:0197 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2013:0198 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2013:0221 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2013:0533 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2013:0953 [No Types Assigned]

https://access.redhat.com/security/cve/CVE-2011-2487 [No Types Assigned]

https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E [No Types Assigned]

NIST AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

NIST (AV:N/AC:M/Au:N/C:P/I:N/A:N)

NIST CWE-327

OR
     *cpe:2.3:a:apache:cxf:*:*:*:*:*:*:*:* versions from (including) 2.4.0 up to (including) 2.4.6
     *cpe:2.3:a:apache:cxf:*:*:*:*:*:*:*:* versions from (including) 2.5.0 up to (including) 2.5.2
     *cpe:2.3:a:apache:wss4j:*:*:*:*:*:*:*:* versions up to (excluding) 1.6.5

OR
     *cpe:2.3:a:redhat:jboss_business_rules_management_system:5.3:*:*:*:*:*:*:*
     *cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.0:*:*:*:*:*:*:*
     *cpe:2.3:a:redhat:jboss_enterprise_application_platform_text-only_advisories:-:*:*:*:*:*:*:*
     *cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.2.0:*:*:*:*:*:*:*
     *cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.3.0:*:*:*:*:*:*:*
     *cpe:2.3:a:redhat:jboss_enterprise_web_platform:5.0.0:*:*:*:*:*:*:*
     *cpe:2.3:a:red

http://cxf.apache.org/note-on-cve-2011-2487.html No Types Assigned

http://cxf.apache.org/note-on-cve-2011-2487.html Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2013-0191.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2013-0191.html Patch, Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2013-0192.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2013-0192.html Patch, Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2013-0193.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2013-0193.html Broken Link, Patch, Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2013-0194.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2013-0194.html Patch, Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2013-0195.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2013-0195.html Patch, Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2013-0196.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2013-0196.html Patch, Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2013-0198.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2013-0198.html Patch, Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2013-0221.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2013-0221.html Patch, Vendor Advisory

http://www.securityfocus.com/bid/57549 No Types Assigned

http://www.securityfocus.com/bid/57549 Third Party Advisory, VDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=713539 No Types Assigned

https://bugzilla.redhat.com/show_bug.cgi?id=713539 Issue Tracking, Patch, Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/81737 No Types Assigned

https://exchange.xforce.ibmcloud.com/vulnerabilities/81737 VDB Entry, Vendor Advisory

https://www.nds.ruhr-uni-bochum.de/research/publications/breaking-xml-encryption-pkcs15/ No Types Assigned

https://www.nds.ruhr-uni-bochum.de/research/publications/breaking-xml-encryption-pkcs15/ Technical Description, Third Party Advisory