PT-2009-1169 · Bouncy Castle · Crypto Provider Package+1
CVE-2007-6721
·
Publicado
2009-03-30
·
Atualizado
2025-05-12
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Bouncy Castle Java Cryptography API versions prior to 1.38
Crypto Provider Package versions prior to 1.36
Description
The issue is related to a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes, which has unknown impact and remote attack vectors.
Recommendations
For Bouncy Castle Java Cryptography API versions prior to 1.38, update to version 1.38 or later.
For Crypto Provider Package versions prior to 1.36, update to version 1.36 or later.
Correção
Side Channel Attack
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Bouncy Castle Java Cryptography Api
Crypto Provider Package