wss4j vulnerabilities (Debian)
9 vulnerabilities.
-
wss4jDebian Apache WSS4J: Unauthenticated denial of service via integer overflow in DER parsing of X.509 certificate extensions 7.5 High -
wss4jDebian Apache WSS4J: UsernameToken replay protection bypassed by re-encoding the Nonce 4.8 Medium -
wss4jDebian Apache WSS4J: WS-SecurityPolicy signature checks skipped in the streaming code after an STR-Transform reference 7.5 High -
wss4jDebian Apache WSS4J: WSS4J EncryptedHeader child confusion causing wrong protected-header selection 9.1 Critical -
wss4jDebian Apache WSS4J: SAML Sender-Vouches Authentication Bypass 9.8 Critical -
wss4jDebian Apache WSS4J: Streaming WS-SecurityPolicy validation may skip element-protection checks. 9.1 Critical -
wss4jDebian Apache WSS4J: Insufficient Validation of Derived-Key Parameters 7.5 High -
wss4jDebian Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J 7.5 High -
wss4jDebian Improper Access Control in Apache WSS4J 5.0 Medium