Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-7G24-QG88-P43Q
HistoryOct 25, 2023 - 6:32 p.m.

jose4j uses weak cryptographic algorithm

2023-10-2518:32:21
CWE-327
CWE-331
GitHub Advisory Database
github.com
8
jose4j
weak algorithm
pbes2
iteration count
software

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

0.0005 Low

EPSS

Percentile

17.8%

JSON

jose4j before v0.9.3 allows attackers to set a low PBES2 iteration count of 1000 or less.

Affected configurations

Vulners
Node
org.bitbucket.b_c\Matchjose4j
CPENameOperatorVersion
org.bitbucket.b_c:jose4jlt0.9.3

Related

prion 1
cvelist 1
debiancve 1
osv 2
ibm 6
nvd 1
redhatcve 1
ubuntucve 1
cve 1
veracode 1
nessus 1
redhat 3
oracle 1
prion
prion
Design/Logic Flaw
2023-10-25 18:17:00
cvelist
cvelist
CVE-2023-31582
2023-10-24 00:00:00
debiancve
debiancve
CVE-2023-31582
2023-10-25 18:17:27
osv
osv
jose4j uses weak cryptographic algorithm
2023-10-25 18:32:21
CVE-2023-31582
2023-10-25 18:17:27
ibm
ibm
Security Bulletin: Information Disclosure vulnerability affect IBM Business Automation Workflow - CVE-2023-31582
2024-02-02 11:00:53
Security Bulletin: IBM QRadar SIEM protocols are vulnerable to information exposure and denial of service (CVE-2023-31582, CVE-2023-51775)
2024-05-15 08:36:09
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2024.
2024-02-02 08:30:03
nvd
nvd
CVE-2023-31582
2023-10-25 18:17:27
redhatcve
redhatcve
CVE-2023-31582
2023-10-26 18:27:17
ubuntucve
ubuntucve
CVE-2023-31582
2023-10-25 00:00:00
cve
cve
CVE-2023-31582
2023-10-25 18:17:27
veracode
veracode
Weak Cryptography
2023-11-01 05:05:23
nessus
nessus
SUSE SLES15 Security Update : SUSE Manager Server 4.3 (SUSE-SU-2024:0485-1)
2024-02-17 00:00:00
redhat
redhat
(RHSA-2023:7676) Important: Red Hat Data Grid 8.4.6 security update
2023-12-06 19:01:48
(RHSA-2023:7678) Important: Red Hat AMQ Streams 2.6.0 release and security update
2023-12-06 23:28:58
(RHSA-2023:7700) Important: Red Hat build of Quarkus 2.13.9 release and security update
2023-12-07 14:24:28
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

0.0005 Low

EPSS

Percentile

17.8%

JSON
Related for GHSA-7G24-QG88-P43Q
prion1cvelist1debiancve1osv2ibm6nvd1redhatcve1ubuntucve1cve1veracode1nessus1redhat3oracle1