[jboss-jira] [JBoss JIRA] (WFLY-4018) CVE-2014-3623 Web Services flaw

CVE-2014-3623 Web Services flaw ------------------------------- Key: WFLY-4018 URL: https://issues.jboss.org/browse/WFLY-4018 Project: WildFly Issue Type: Bug Components: Web Services Affects Versions: 8.1.0.Final, 9.0.0.Alpha1 Reporter: Arun Neelicattu Assignee: Alessio Soldano Labels: CVE-2014-3584, CVE-2014-3623, component:cxf, component:wss4j Fix For: 9.0.0.Beta1 WildFly tracking bug for multiple vulnerabilities affecting the Web Services component. See [CVE-2014-3623|https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3623] for more information regarding the flaw. Upgrading cxf to 2.7.13 and wss4j to 1.6.17 will resolve this.