Colm O hEigeartaigh created CXF-6209:
----------------------------------------
Summary: Bug in processing Signed/Encrypted Elements policies with
multiple XPaths
Key: CXF-6209
URL: https://issues.apache.org/jira/browse/CXF-6209
Project: CXF
Issue Type: Bug
Components: WS-* Components
Affects Versions: 2.7.14, 3.0.3
Reporter: Colm O hEigeartaigh
Assignee: Colm O hEigeartaigh
Priority: Minor
Fix For: 3.0.4, 2.7.15
There is a bug in the WS-SecurityPolicy layer in CXF when matching a request
message against a Signed/Encrypted Elements security policy with multiple XPath
expressions. The namespace/prefixes are only read from the first XPath policy,
meaning that if the second or subsequent policy uses a different prefix that
isn't in scope, the policy validation will fail.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
