Debian/wss4j: high 7.5
Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about decryption failures when decrypting an encrypted key or message data, which makes it easier for remote attackers to
Action: Upgrade wss4j to 1.6.15-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.15-2 | - |
Fixed versions
| 1.6.15-2 |
Sources
published · modified · JSON