The W3C XML Encryption Standard, as used in the JBoss Web Services (JBossWS) component in…
Priority LOW 28CWE-310Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Partial · None · None
- Fix status
- Partial Red Hat: 12 fixed, 3 without a fix
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.
Summary
The W3C XML Encryption Standard, as used in the JBoss Web Services (JBossWS) component in JBoss Enterprise Portal Platform before 5.2.2 and other products, when using block ciphers in cipher-block chaining (CBC) mode, allows remote attackers to obtain plaintext data via a chosen-ciphertext attack on SOAP responses, aka "character encoding pattern attack."
Why it matters now
EPSS 0.02587 85th percentileScored 2026-11-07
Fix Partial Red Hat: 13 advisoriesRed Hat: 12 fixed, 3 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 6
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:* | up to 5.2.1 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.0.0:*:*:*:*:*:*:* | 5.0.0 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.0.1:*:*:*:*:*:*:* | 5.0.1 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.1.0:*:*:*:*:*:*:* | 5.1.0 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.1.1:*:*:*:*:*:*:* | 5.1.1 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.2.0:*:*:*:*:*:*:* | 5.2.0 | Vulnerable | Red Hat |
- cpe:2.3:a:redhat:jboss_enterprise_portal_platform:*:*:*:*:*:*:*:* Versions up to 5.2.1 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.0.0:*:*:*:*:*:*:* Versions 5.0.0 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.0.1:*:*:*:*:*:*:* Versions 5.0.1 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.1.0:*:*:*:*:*:*:* Versions 5.1.0 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.1.1:*:*:*:*:*:*:* Versions 5.1.1 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.2.0:*:*:*:*:*:*:* Versions 5.2.0 Vulnerable ·Red Hat
Remediation
Red Hat 13 advisories
- RHSA-2013:0569 Released 2013-02-26 · Red Hat rating ImportantJBoss Web Services security update
- Red Hat JBoss Portal 4.3
- Red Hat JBoss SOA Platform 4.3
- RHSA-2013:0261 Released 2013-02-14 · Red Hat rating ImportantJBoss Enterprise Application Platform 4.3.0 CP10 security update
- Red Hat JBoss Enterprise Application Platform 4.3
- RHSA-2013:0221 Released 2013-01-31 · Red Hat rating ImportantJBoss Enterprise BRMS Platform 5.3.1 update
- JBoss Enterprise BRMS Platform 5.3
Show 10 more Red Hat advisories
- RHSA-2013:0198 Released 2013-01-24 · Red Hat rating ImportantJBoss Enterprise Web Platform 5.2.0 update
- Red Hat JBoss Web Platform 5.2
- RHSA-2013:0197 Released 2013-01-24 · Red Hat rating ImportantJBoss Enterprise Web Platform 5.2.0 update
- Red Hat JBoss Web Platform 5 for RHEL 4 AS aopalliance-1.0-5.2.jdk6.ep5.el4, apache-cxf-2.2.12-6.1.patch_04.ep5.el4, bsh2-2.0-0.b4.15.1.patch01.ep5.el4 +47
- Red Hat JBoss Web Platform 5 for RHEL 4 ES aopalliance-1.0-5.2.jdk6.ep5.el4, apache-cxf-2.2.12-6.1.patch_04.ep5.el4, bsh2-2.0-0.b4.15.1.patch01.ep5.el4 +47
- RHSA-2013:0196 Released 2013-01-24 · Red Hat rating ImportantJBoss Enterprise Web Platform 5.2.0 update
- Red Hat JBoss Web Platform 5 for RHEL 5 Server aopalliance-1.0-5.2.jdk6.ep5.el5, apache-cxf-2.2.12-6.1.patch_04.ep5.el5, bsh2-2.0-0.b4.15.1.patch01.ep5.el5 +47
- RHSA-2013:0195 Released 2013-01-24 · Red Hat rating ImportantJBoss Enterprise Web Platform 5.2.0 update
- Red Hat JBoss Web Platform 5 for RHEL 6 Server aopalliance-1.0-5.3.ep5.el6, apache-cxf-2.2.12-6.1.patch_04.ep5.el6, bsh2-2.0-0.b4.15.patch01.ep5.el6 +47
- RHSA-2013:0193 Released 2013-01-24 · Red Hat rating ImportantJBoss Enterprise Application Platform 5.2.0 update
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 AS aopalliance-1.0-5.2.jdk6.ep5.el4, apache-cxf-2.2.12-6.1.patch_04.ep5.el4, bsh2-2.0-0.b4.15.1.patch01.ep5.el4 +47
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 4 ES aopalliance-1.0-5.2.jdk6.ep5.el4, apache-cxf-2.2.12-6.1.patch_04.ep5.el4, bsh2-2.0-0.b4.15.1.patch01.ep5.el4 +47
- RHSA-2013:0191 Released 2013-01-24 · Red Hat rating ImportantJBoss Enterprise Application Platform 5.2.0 update
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server aopalliance-1.0-5.3.ep5.el6, apache-cxf-2.2.12-6.1.patch_04.ep5.el6, bsh2-2.0-0.b4.15.patch01.ep5.el6 +47
- RHSA-2013:0192 Released 2013-01-24 · Red Hat rating ImportantJBoss Enterprise Application Platform 5.2.0 update
- Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server aopalliance-1.0-5.2.jdk6.ep5.el5, apache-cxf-2.2.12-6.1.patch_04.ep5.el5, bsh2-2.0-0.b4.15.1.patch01.ep5.el5 +47
- RHSA-2013:0194 Released 2013-01-24 · Red Hat rating ImportantJBoss Enterprise Application Platform 5.2.0 update
- Red Hat JBoss Enterprise Application Platform 5.2
- RHSA-2012:1344 Released 2012-10-08 · Red Hat rating ImportantJBoss Enterprise Portal Platform 5.2.2 security update
- Red Hat JBoss Portal 5.2
- RHSA-2012:1330 Released 2012-10-03 · Red Hat rating ImportantJBoss Enterprise SOA Platform 5.3.0 security update
- Red Hat JBoss SOA Platform 5.3
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat JBoss BRMS 5 | Affected | No fix yet |
| Red Hat JBoss Portal 5 | Affected | No fix yet |
| Red Hat JBoss SOA Platform 5 | Affected | No fix yet |
| JBoss Enterprise BRMS Platform 5.3 | Fixed | RHSA-2013:0221 |
| Red Hat JBoss Enterprise Application Platform 4.3 | Fixed | RHSA-2013:0261 |
| Red Hat JBoss Enterprise Application Platform 5 for RHEL 5 Server | Fixed | RHSA-2013:0192 |
| Red Hat JBoss Enterprise Application Platform 5 for RHEL 6 Server | Fixed | RHSA-2013:0191 |
| Red Hat JBoss Enterprise Application Platform 5.2 | Fixed | RHSA-2013:0194 |
| Red Hat JBoss Portal 4.3 | Fixed | RHSA-2013:0569 |
| Red Hat JBoss Portal 5.2 | Fixed | RHSA-2012:1344 |
| Red Hat JBoss SOA Platform 4.3 | Fixed | RHSA-2013:0569 |
| Red Hat JBoss SOA Platform 5.3 | Fixed | RHSA-2012:1330 |
| Red Hat JBoss Web Platform 5 for RHEL 5 Server | Fixed | RHSA-2013:0196 |
| Red Hat JBoss Web Platform 5 for RHEL 6 Server | Fixed | RHSA-2013:0195 |
| Red Hat JBoss Web Platform 5.2 | Fixed | RHSA-2013:0198 |
Timeline
- 2026-10-02 Threatist record created from CVE-2011-1096
- 2026-10-03 Alias added: GHSA-r89h-jcj8-5p2m
References
Advisory 14
Other 13
- http://aktuell.ruhr-uni-bochum.de/pm2011/pm00330.html.de
- http://cxf.apache.org/note-on-cve-2011-1096.html
- https://bugzilla.redhat.com/show_bug.cgi?id=681916
- http://coheigea.blogspot.com/2012/04/note-on-cve-2011-1096.html
- http://dl.acm.org/citation.cfm?id=2046756&dl=ACM&coll=DL
- http://www.csoonline.com/article/692366/widely-used-encryption-standard-is-insecure-say-experts
- [cxf-commits] 20190326 svn commit: r1042570 [4/4] - in /websites/production/cxf/content: cache/docs.pageCache docs/jax-rs-http-signature.html docs/jax-rs-jose.html docs/jax-rs-oauth2.html docs/jax-rs-xml-security.html docs/secure-jax-rs-services.html
- [cxf-commits] 20200116 svn commit: r1055336 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-12423.txt.asc security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html
- [cxf-commits] 20200319 svn commit: r1058035 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2019-17573.txt.asc security-advisories.html
- [cxf-commits] 20200401 svn commit: r1058573 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2020-1954.txt.asc security-advisories.html
- [cxf-commits] 20201112 svn commit: r1067927 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2020-13954.txt.asc security-advisories.html
- [cxf-commits] 20210402 svn commit: r1073270 - in /websites/production/cxf/content: cache/main.pageCache security-advisories.data/CVE-2021-22696.txt.asc security-advisories.html
- [cxf-commits] 20210616 svn commit: r1075801 - in /websites/production/cxf/content: cache/main.pageCache index.html security-advisories.data/CVE-2021-30468.txt.asc security-advisories.html
More Red Hat Jboss Enterprise Portal Platform vulnerabilities
- TI-2013-01952 The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1… CVSS 2.0HIGH 7.5
- TI-2013-01934 ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss… CVSS 2.0HIGH 7.5
- TI-2013-01951 The readObject method in the DiskFileItem class in Apache Tomcat and JBoss Web, as used… CVSS 2.0HIGH 7.5
- TI-2011-03971 The (1) JNDI service, (2) HA-JNDI service, and (3) HAJNDIFactory invoker servlet in JBoss… CVSS 2.0HIGH 7.5
- TI-2012-04691 Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does… CVSS 2.0MEDIUM 6.4
- TI-2013-00244 The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 does not… CVSS 2.0HIGH 7.5
Sources
- CVE-2011-1096 · CVE Program
- CVE-2011-1096 · NVD
- FIRST EPSS
- GHSA-r89h-jcj8-5p2m · GitHub Advisory Database · CC BY 4.0
- CVE-2011-1096 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences