[jboss-jira] [JBoss JIRA] (WFLY-4018) CVE-2014-3584 CVE-2014-3623 Web Services: various flaws [wildfly]

[Arun Neelicattu (JIRA)]

Arun Neelicattu created WFLY-4018:
-------------------------------------

             Summary: CVE-2014-3584 CVE-2014-3623 Web Services: various flaws  [wildfly]
                 Key: WFLY-4018
                 URL: https://issues.jboss.org/browse/WFLY-4018
             Project: WildFly
          Issue Type: Bug
          Components: Web Services
    Affects Versions: 9.0.0.Alpha1, 8.1.0.Final
            Reporter: Arun Neelicattu
            Assignee: Alessio Soldano


WildFly tracking bug for multiple vulnerabilities affecting the Web Services component.

See [CVE-2014-3584|https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3584] and [CVE-2014-3623|https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3623] for more information regarding the flaws.

Upgrading cxf to 2.7.13 and wss4j to 1.6.17 will resolve this.




--
This message was sent by Atlassian JIRA
(v6.3.1#6329)