Red Hat Security Advisory: JBoss Enterprise BRMS Platform 5.3.1 update
apache-cxf: Apache CXF does not verify that elements were signed / encrypted by a particular Supporting Token
cpe:/a:redhat:jboss_enterprise_brms_platform:5.3