org.springframework.ws:spring-ws-security
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Spring Web Services: WSS4J validation does not use configured replay cache | org.springframework.ws:spring-ws-securityRed Hat Fuse 7/spring-ws-security | MavenRed Hat | Low | Fix reported | |
| Spring Web Services: X.509 authentication bypasses Spring Security account checks | org.springframework.ws:spring-ws-security | Maven | Medium | Fix reported | |
| Spring Web Services: Wss4jSecurityInterceptor disables WS-I BSP validation by default | org.springframework.ws:spring-ws-security | Maven | High | Fix reported | |
| Spring Web Services: SOAP security faults leak Spring Security account state | org.springframework.ws:spring-ws-security | Maven | Medium | Fix reported | |
| Spring Web Services: Inbound WS-Security allows RSA PKCS#1 v1.5 key transport by default | org.springframework.ws:spring-ws-security | Maven | Medium | Fix reported |