Major Description
Below vulnerability had reported on mina-core api.
CVE-2019-0231 - 'Handling of the close_notify SSL/TLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the client potentially receive clear-text messages which were supposed to be encrypted.'
This have an impact on 'cxf-rt-transports-udp' as it is dependent on mina-core. The dependency should be updated to 2.0.21 or 2.1.1/later.