[WSS-665] Add cryptacular dependency and upgrade to 1.2.4 to fix CVE-2020-7226

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.2.4
• Fix Version/s: 2.2.5
• Component/s: WSS4J Core
• Assignee: Colm O hEigeartaigh
• Reporter: Jim Ma
• Created: 19/Feb/20 06:10
• Updated: 18/Mar/20 07:17
• Resolved: 19/Feb/20 08:29

Description

Add the Cryptacular dependency directly into the WSS4J ws-security-common pom and upgrade to 1.2.4 to fix https://nvd.nist.gov/vuln/detail/CVE-2020-7226