VDB

BDU%3A2019-00323

BDU%3A2019-00323 PUBLISHED CVSS 5 MEDIUM

Уязвимость метода RsaKeyPairGenerator::getNumberOfIterations() библиотеки Bouncy Castle, позволяющая нарушителю получить несанкционированный доступ к защищаемым данным

Risk Scores

CVSS 2.0
5

Affected Products

VendorProductVersions
Oracle Corp., Сообщество свободного программного обеспечения, Novell Inc., Legion of the Bouncy Castle Inc., Red Hat Inc., Siemens AGAPI Gateway, Debian GNU/Linux, OpenSUSE Leap, Enterprise Repository, Business Process Management Suite, WebLogic Server, PeopleSoft Enterprise PeopleTools, Bouncy Castle, WebCenter Portal, Managed File Transfer, Red Hat Virtualization, Enterprise Manager Base Platform, Retail Xstore Point of Service, Oracle Utilities Network Management System, Communications Converged Application Server, Communications WebRTC Session Controller, Communications Application Session Controller, Business Transaction Management, SOA Suite, Red Hat Enterprise Linux, Red Hat Satellite, Oracle Data Integrator, Jboss Fuse, OpenShift Application Runtimes, Red Hat JBoss Fuse, Enterprise Manager for Fusion Middleware, Red Hat Single Sign-On, Red Hat JBoss EAP, Banking Platform, Communications Diameter Signaling Router, Bouncy Castle FIPS Java API (BC-FJA), Oracle Retail Convenience and Fuel POS Software, Oracle Communications Convergence, JBoss Enterprise Application Platform

Timeline

  • Jan 28, 2019 CVE Published
  • Mar 23, 2021 CVE Updated
  • Mar 18, 2026 Distribution Patch
  • Mar 18, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›