CVE-2011-2487
CVE-2011-2487
Vexday Risk Score
3Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS —EPSS 1.8%KEV nãoPoC —Patch —
Ciclo de vida
11 mar 2020Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.
Quer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →Referências
http://cxf.apache.org/note-on-cve-2011-2487.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0191.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0192.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0193.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0194.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0195.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0196.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0198.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0221.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=713539https://exchange.xforce.ibmcloud.com/vulnerabilities/81737https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E