VDB
CERTCC-2018-306792
CERTCC-2018-306792
PUBLISHED
CVSS 2.0999999046325684 LOW
Bouncy Castle BKS version 1 keystore files use an HMAC that is only 16 bits long, which can allow an attacker to compromise the integrity of a BKS-V1 keystore.
Risk Scores
CVSS 2.0
2.0999999046325684
Timeline
- Mar 20, 2012 CVE Published
- Apr 4, 2018 CVE Updated
- Mar 17, 2026 Security Advisory
References
- Bouncy Castle BKS-V1 keystore files vulnerable to trivial hash collisions url
- Bouncy Castle BKS-V1 keystore files vulnerable to trivial hash collisions url
- Bouncy Castle BKS-V1 keystore files vulnerable to trivial hash collisions url
- Bouncy Castle BKS-V1 keystore files vulnerable to trivial hash collisions advisory