← Back

CVE-2026-40996

nvd nist
Published: Jun 11, 2026Modified: Sep 4, 2026

JSON object

Loading...
4.8
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Exploitability: 2.2 / Impact: 2.5
Source: security@vmware.com (Secondary)

Description

Wss4jSecurityInterceptor defaulted allowRSA15KeyTransportAlgorithm to true, overriding Apache WSS4J's safer default for validation RequestData. Inbound WS-Security decryption could therefore accept RSA PKCS#1 v1.5 (rsa-1_5) encrypted key material unless operators explicitly reconfigured the flag. Affected versions: Spring Web Services 5.0.0 through 5.0.1; 4.1.0 through 4.1.3; 4.0.0 through 4.0.18; 3.1.0 through 3.1.8.

Affected (4)

Broadcom
1 product
Spring Web Services
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Broadcom
Spring Web Services
Before 3.1.9
Spring Web Services
From 4.0.0 to 4.0.19
Spring Web Services
From 4.1.0 to 4.1.3.1
Spring Web Services
From 5.0.0 to 5.0.1.1

Related CWEs

CWE-327
Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.

References (1)

Source: security@vmware.com
Vendor AdvisoryMitigation

Timeline

No history available yet.