Java Security Services provides an interface between Java Virtual Machine and Network Security Services . It supports most of the security standards and encryption technologies supported by NSS including communication through SSL/TLS network protocols. JSS is primarily utilized by the Certificate Server as a part of the Identity Management System. Security Fix: * JSS: OCSP policy "Leaf and Chain" implicitly trusts the root certificate For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.