To fix the issue[1] of starting CXF application which has no right to access the $JRE_HOME/lib, we need to let the WSDLFactory catch the SecurityException[2].
[1]http://stackoverflow.com/questions/7565658/deploying-cxf-web-app/7701094#comment9595198_7701094
[2] diff new/src/javax/wsdl/factory/WSDLFactory.java old/src/javax/wsdl/factory/WSDLFactory.java
255,257d254
< catch (SecurityException e)
< {
< }