Read the docs
Red Hat Security Advisory

RHSA-2013:0943

Red Hat JBoss SOA Platform 5.3.1 update

Released 2013-06-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

Priority LOW 38

Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify that a specified cryptographic algorithm is allowed by the WS-SecurityPolicy AlgorithmSuite definition before decrypting,…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.06322 Published 2013-08-19 Partial fix · 2.5.10, 2.6.7 +1 CWE-310