title: Red Hat Security Advisory: apache-cxf security update
description: apache-cxf: Bypass of security constraints on WS endpoints when using WSS4JInInterceptor apache-cxf: UsernameTokenPolicyValidator and UsernameTokenInterceptor allow empty passwords to authenticate
cpes: cpe:/a:redhat:jboss_enterprise_application_platform:6.0.1