WSS4J accepts Timestamps that are "Created" in the future
---------------------------------------------------------
Key: WSS-262
URL: https://issues.apache.org/jira/browse/WSS-262
Project: WSS4J
Issue Type: Bug
Components: WSS4J Axis Integration
Affects Versions: 1.5.10
Reporter: Colm O hEigeartaigh
Assignee: Colm O hEigeartaigh
Fix For: 1.6, 1.5.11
The Timestamp processor accepts Timestamps that are "Created" in the future.
This is not good as it could lead to replay attacks.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
