Apache Software Foundation Wss4j vulnerabilities
- apache wss4jApache WSS4J: Unauthenticated denial of service via integer overflow in DER parsing of X.509 certificate extensions7.5 High
- apache wss4jApache WSS4J: UsernameToken replay protection bypassed by re-encoding the Nonce4.8 Medium
- apache wss4jApache WSS4J: WS-SecurityPolicy signature checks skipped in the streaming code after an STR-Transform reference7.5 High
- apache wss4jApache WSS4J: WSS4J EncryptedHeader child confusion causing wrong protected-header selection9.1 Critical
- apache wss4jApache WSS4J: SAML Sender-Vouches Authentication Bypass9.8 Critical
- apache wss4jApache WSS4J: Streaming WS-SecurityPolicy validation may skip element-protection checks.9.1 Critical
- apache wss4jApache WSS4J: Insufficient Validation of Derived-Key Parameters7.5 High