NVD

Id
8072  
Name
CVE-2011-1096  
Description
The W3C XML Encryption Standard, as used in the JBoss Web Services (JBossWS) component in JBoss Enterprise Portal Platform before 5.2.2 and other products, when using block ciphers in cipher-block chaining (CBC) mode, allows remote attackers to obtain plaintext data via a chosen-ciphertext attack on SOAP responses, aka "character encoding pattern attack."  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2012-11-23  
Modified Date
2013-10-30  
Seq
2011-1096  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
46057 8072 CVE-2011-1096 http://aktuell.ruhr-uni-bochum.de/pm2011/pm00330.html.de  View
46058 8072 CVE-2011-1096 http://coheigea.blogspot.com/2012/04/note-on-cve-2011-1096.html  View
46059 8072 CVE-2011-1096 http://cxf.apache.org/note-on-cve-2011-1096.html  View
46060 8072 CVE-2011-1096 http://dl.acm.org/citation.cfm?id=2046756&dl=ACM&coll=DL  View
46061 8072 CVE-2011-1096 RHSA-2012:1301  View
46062 8072 CVE-2011-1096 RHSA-2012:1330  View
46063 8072 CVE-2011-1096 RHSA-2012:1344  View
46064 8072 CVE-2011-1096 RHSA-2013:0191  View
46065 8072 CVE-2011-1096 RHSA-2013:0192  View
46066 8072 CVE-2011-1096 RHSA-2013:0193  View
46067 8072 CVE-2011-1096 RHSA-2013:0194  View
46068 8072 CVE-2011-1096 RHSA-2013:0195  View
46069 8072 CVE-2011-1096 RHSA-2013:0196  View
46070 8072 CVE-2011-1096 RHSA-2013:0197  View
46071 8072 CVE-2011-1096 RHSA-2013:0198  View
46072 8072 CVE-2011-1096 RHSA-2013:0221  View
46073 8072 CVE-2011-1096 RHSA-2013:0261  View
46074 8072 CVE-2011-1096 RHSA-2013:1437  View
46075 8072 CVE-2011-1096 http://www.csoonline.com/article/692366/widely-used-encryption-standard-is-insecure-say-experts  View
46076 8072 CVE-2011-1096 55770  View
46077 8072 CVE-2011-1096 jboss-web-services-cbc-info-disc(79031)  View
46078 8072 CVE-2011-1096 https://bugzilla.redhat.com/show_bug.cgi?id=681916  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29834 JVNDB-2012-005541 JBoss Enterprise Portal Platform の JBossWS における平文データを取得される脆弱性 JBoss Enterprise Portal Platform およびその他の製品の JBoss Web Services (JBossWS) で使用される W3C XML 暗号化標準には、暗号ブロック連鎖 (CBC) モードでブロック暗号を使用する場合、平文データを取得される脆弱性が存在します。 CVE-2011-1096 49003 CVE-2011-1096 8072 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005541.html 2012-10-08 2012-11-27 View