dev@javaserverfaces.java.net

JSF security issue

From: Stan Silvert <ssilvert_at_redhat.com>
Date: Wed, 09 Jun 2010 08:38:43 -0400

I haven't analyzed this, but wanted to make sure everyone was aware:

http://www.theregister.co.uk/2010/06/08/padding_oracle_attack_tool/