Lucene search

K
redhatcveRedhat.comRH:CVE-2018-2579
HistoryOct 23, 2019 - 12:50 p.m.

CVE-2018-2579

2019-10-2312:50:14
redhat.com
access.redhat.com
9

0.002 Low

EPSS

Percentile

64.7%

It was discovered that multiple encryption key classes in the Libraries component of OpenJDK did not properly synchronize access to their internal data. This could possibly cause a multi-threaded Java application to apply weak encryption to data because of the use of a key that was zeroed out.