Lucene search
RedhatCVELIST:CVE-2016-5431HistoryAug 07, 2019 - 3:13 p.m.
CVE-2016-5431
2019-08-0715:13:47
CWE-327
redhat
www.cve.org
1
0.001 Low
EPSS
Percentile
36.0%
The PHP JOSE Library by Gree Inc. before version 2.2.1 is vulnerable to key confusion/algorithm substitution in the JWS component resulting in bypassing the signature verification via crafted tokens.
CNA Affected
[
{
"product": "jose-php",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "fixed in 2.2.1"
}
]
}
]Related
osv
osv
CVE-2016-5431
2019-08-07 15:15:11
PHP JOSE Library by Gree Inc. Uses a Broken or Risky Cryptographic Algorithm
2022-05-24 16:52:44
nvd
nvd
CVE-2016-5431
2019-08-07 15:15:11
cve
cve
CVE-2016-5431
2019-08-07 15:15:11
prion
prion
Design/Logic Flaw
2019-08-07 15:15:00
github
github
PHP JOSE Library by Gree Inc. Uses a Broken or Risky Cryptographic Algorithm
2022-05-24 16:52:44
veracode
veracode
Signature Verification Bypass
2019-08-08 01:32:07