Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2011-1096
HistoryNov 23, 2012 - 8:55 p.m.

CVE-2011-1096

2012-11-2320:55:01
CWE-310
redhat
web.nvd.nist.gov
44
2
cve-2011-1096
w3c xml encryption
jboss web services
chosen-ciphertext attack
soap responses
character encoding pattern attack
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

5.6

Confidence

High

EPSS

0.004

Percentile

74.4%

JSON

The W3C XML Encryption Standard, as used in the JBoss Web Services (JBossWS) component in JBoss Enterprise Portal Platform before 5.2.2 and other products, when using block ciphers in cipher-block chaining (CBC) mode, allows remote attackers to obtain plaintext data via a chosen-ciphertext attack on SOAP responses, aka “character encoding pattern attack.”

Affected configurations

Nvd
Node
redhatjboss_enterprise_portal_platformRange≤5.2.1
OR
redhatjboss_enterprise_portal_platformMatch5.0.0
OR
redhatjboss_enterprise_portal_platformMatch5.0.1
OR
redhatjboss_enterprise_portal_platformMatch5.1.0
OR
redhatjboss_enterprise_portal_platformMatch5.1.1
OR
redhatjboss_enterprise_portal_platformMatch5.2.0
VendorProductVersionCPE
redhatjboss_enterprise_portal_platform*cpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:*
redhatjboss_enterprise_portal_platform5.0.0cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.0.0:*:*:*:*:*:*:*
redhatjboss_enterprise_portal_platform5.0.1cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.0.1:*:*:*:*:*:*:*
redhatjboss_enterprise_portal_platform5.1.0cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.1.0:*:*:*:*:*:*:*
redhatjboss_enterprise_portal_platform5.1.1cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.1.1:*:*:*:*:*:*:*
redhatjboss_enterprise_portal_platform5.2.0cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.2.0:*:*:*:*:*:*:*

References

Social References

More

Related

prion 1
redhat 17
nvd 1
cvelist 1
nessus 9
veracode 9
f5 2
prion
prion
Input validation
2012-11-23 20:55:00
redhat
redhat
(RHSA-2013:0261) Important: JBoss Enterprise Application Platform 4.3.0 CP10 security update
2013-02-14 00:00:00
(RHSA-2013:0569) Important: JBoss Web Services security update
2013-02-26 00:00:00
(RHSA-2013:0874) Important: JBoss Enterprise Web Platform 5.2.0 security update
2013-05-28 00:00:00
nvd
nvd
CVE-2011-1096
2012-11-23 20:55:01
cvelist
cvelist
CVE-2011-1096
2012-11-23 20:00:00
nessus
nessus
RHEL 5 / 6 : JBoss EAP (RHSA-2013:0873)
2013-05-29 00:00:00
RHEL 5 : JBoss EAP (RHSA-2013:0839)
2013-05-21 00:00:00
RHEL 6 : JBoss EAP (RHSA-2013:0834)
2013-05-21 00:00:00
veracode
veracode
Authentication Bypass
2019-05-02 04:45:00
Plaintext Weak Encryption
2019-05-02 04:46:04
Privilege Escalation
2019-05-02 04:46:47
f5
f5
SOL15580 - Apache CXF and JBoss vulnerabilities
2014-09-11 00:00:00
K15580 : Apache CXF and JBoss vulnerabilities
2014-09-11 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

5.6

Confidence

High

EPSS

0.004

Percentile

74.4%

JSON
Related for CVE-2011-1096
prion1redhat17nvd1cvelist1nessus9veracode9f52