CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.0. It affects Apache. It may be remotely exploitable.
CVE
CVE-2015-0227
Severity
MEDIUM
CVSS
5
EPSS
7.54%
Apache
Original NVD Description
Apache WSS4J before 1.6.17 and 2.x before 2.0.2 allows remote attackers to bypass the requireSignedEncryptedDataElements configuration via a vectors related to "wrapping attacks."