CVE-2026-40996 | BDVDB-2026-339736 Detail
SpringSpring Web Services
Description#
Wss4jSecurityInterceptor defaulted allowRSA15KeyTransportAlgorithm to true, overriding Apache WSS4J's safer default for validation RequestData. Inbound WS-Security decryption could therefore accept RSA PKCS#1 v1.5 (rsa-1_5) encrypted key material unless operators explicitly reconfigured the flag. Affected versions: Spring Web Services 5.0.0 through 5.0.1; 4.1.0 through 4.1.3; 4.0.0 through 4.0.18; 3.1.0 through 3.1.8.
Impact#
An attacker in a man-in-the-middle or oracle-capable position can exploit the weak RSA PKCS#1 v1.5 key transport algorithm accepted by default for inbound WS-Security decryption.
Weaknesses#
- CWE-327 Use of a Broken or Risky Cryptographic Algorithm
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.