Lucene search
Veracode Vulnerability DatabaseVERACODE:38171HistoryNov 23, 2022 - 2:09 a.m.
Information Disclosure
2022-11-2302:09:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
bc-fips
vulnerability
information disclosure
java 13
software
0.0004 Low
EPSS
Percentile
15.5%
bc-fips is vulnerable to Information Disclosure. The vulnerability exists because the temporary keys used in the module get zeroed out while still in use by the module, resulting in an error or potential information loss. This vulnerability only affects Java 13 or later.
| CPE | Name | Operator | Version |
|---|---|---|---|
| bouncy castle provider (fips distribution) | le | 1.0.2.3 | |
| bouncy castle provider (fips distribution) | le | 1.0.2.3 |
Related
ibm
ibm
ubuntucve
ubuntucve
CVE-2022-45146
2022-11-21 00:00:00
redhatcve
redhatcve
CVE-2022-45146
2024-01-02 05:30:31
nvd
nvd
CVE-2022-45146
2022-11-21 10:15:31
github
github
Garbage collection issue in BC-FJA in Java 13 and later
2022-11-21 12:30:17
cnvd
cnvd
Bouncy Castle BC code issue vulnerability
2022-11-23 00:00:00
osv
osv
Garbage collection issue in BC-FJA in Java 13 and later
2022-11-21 12:30:17
prion
prion
Code injection
2022-11-21 10:15:00
cgr
cgr
CVE-2022-45146 vulnerabilities
2024-05-19 03:07:16
cve
cve
CVE-2022-45146
2022-11-21 10:15:31
cvelist
cvelist
CVE-2022-45146
2022-11-21 00:00:00
wolfi
wolfi
CVE-2022-45146 vulnerabilities
2024-07-06 03:08:40