wss4j vulnerabilities (Ubuntu)
7 vulnerabilities.
-
wss4jUbuntu Apache WSS4J: Unauthenticated denial of service via integer overflow in DER parsing of X.509 certificate extensions 7.5 High -
wss4jUbuntu Apache WSS4J: UsernameToken replay protection bypassed by re-encoding the Nonce 4.8 Medium -
wss4jUbuntu Apache WSS4J: WS-SecurityPolicy signature checks skipped in the streaming code after an STR-Transform reference 7.5 High -
wss4jUbuntu Apache WSS4J: WSS4J EncryptedHeader child confusion causing wrong protected-header selection 9.1 Critical -
wss4jUbuntu Apache WSS4J: SAML Sender-Vouches Authentication Bypass 9.8 Critical -
wss4jUbuntu Apache WSS4J: Streaming WS-SecurityPolicy validation may skip element-protection checks. 9.1 Critical -
wss4jUbuntu Apache WSS4J: Insufficient Validation of Derived-Key Parameters 7.5 High