CVE-2015-0227 REJECTED

Apache WSS4J before 1.6.17 and 2.x before 2.0.2 allows remote attackers to bypass the requireSignedEncryptedDataElements configuration via a vectors related to "wrapping attacks."

EPSS 13.87% · 94.2th percentile

Risk Scores

EPSS Score
13.87%
94.2th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSwss4j0

Timeline

References

Open in Interactive Console →