Authentication flaw

2019-10-1514:15:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.4%

JSON

Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.

CPENameOperatorVersion
hadoopeq3.2.1
nimbus_jose\\+jwtlt7.9
communications_cloud_native_core_security_edge_protection_proxyeq1.7.0
communications_pricing_design_centereq12.0.0.3.0
data_integratoreq12.2.1.4.0
enterprise_manager_base_platformeq13.4.0.0
healthcare_data_repositoryeq8.1.0
insurance_policy_administrationge11.0
insurance_policy_administrationle11.3.1
jd_edwards_enterpriseone_orchestratorle9.2.5.3

Name	Operator	Version
hadoop	eq	3.2.1
nimbus_jose\\+jwt	lt	7.9
communications_cloud_native_core_security_edge_protection_proxy	eq	1.7.0
communications_pricing_design_center	eq	12.0.0.3.0
data_integrator	eq	12.2.1.4.0
enterprise_manager_base_platform	eq	13.4.0.0
healthcare_data_repository	eq	8.1.0
insurance_policy_administration	ge	11.0
insurance_policy_administration	le	11.3.1
jd_edwards_enterpriseone_orchestrator	le	9.2.5.3