VDB
BDU%3A2022-07422
BDU%3A2022-07422
PUBLISHED
CVSS 4.300000190734863 MEDIUM
Уязвимость компонента HMAC Java-библиотеки Nimbus JOSE + JWT, позволяющая нарушителю раскрыть защищаемую информацию
Risk Scores
CVSS 2.0
4.300000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Connect2id Ltd. | Nimbus JOSE + JWT |
Timeline
- Dec 24, 2022 CVE Published
References
- https://nvd.nist.gov/vuln/detail/CVE-2017-12973 url
- https://vuldb.com/?id.105615 url
- https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt url
- https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/6a29f10f723f406eb25555f55842c59a43a38912 advisory
- https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/223/aescbc-return-immediately-on-invalid-hmac advisory