VDB
BDU%3A2024-03299
BDU%3A2024-03299
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость компонента PasswordBasedDecrypter Java-библиотеки Nimbus JOSE + JWT, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., Connect2id Ltd. | WebLogic Server, Nimbus JOSE + JWT, Primavera Unifier |
Timeline
- Apr 26, 2024 CVE Published
References
- https://connect2id.com/products/nimbus-jose-jwt url
- https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/526/ url
- https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/3b3b77e advisory
- https://github.com/jeremylong/DependencyCheck/issues/6464 advisory
- https://www.oracle.com/security-alerts/cpuapr2024.html advisory