Description

Wss4jSecurityInterceptor defaulted allowRSA15KeyTransportAlgorithm to true, overriding Apache WSS4J’s safer default for validation RequestData. Inbound WS-Security decryption could therefore accept RSA PKCS#1 v1.5 (rsa-1_5) encrypted key material unless operators explicitly reconfigured the flag, increasing exposure to attacks that target that legacy key-transport construction in man-in-the-middle or oracle-capable positions.

Preconditions include inbound XML encryption or key transport handled by WSS4J through Spring WS, peers that negotiate or emit RSA v1.5 key transport, and an attacker with a position that allows practical exploitation of the weaker algorithm choice.

Affected Spring Products and Versions

Spring Web Services:

• 5.0.0 - 5.0.1
• 4.1.0 - 4.1.3
• 4.0.0 - 4.0.18
• 3.1.0 - 3.1.8

Versions that are no longer supported are also affected.

Mitigation

Users of affected versions should upgrade to the corresponding fixed version.

If you are not able to upgrade, you can disable RSA PKCS#1 v1.5 encryption explicitly by calling the setAllowRSA15KeyTransportAlgorithm setter method with false as argument.

References

https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N&version=3.1

History

• 2026-06-10: Initial vulnerability report published.