Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:41361
HistoryJul 19, 2023 - 9:31 a.m.

Weak Encryption

2023-07-1909:31:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
vulnerability
libcjose.so
weak encryption
jwe.c
authentication tag
unauthorized access
software

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

EPSS

0.003

Percentile

65.9%

JSON

libcjose.so is vulnerable to weak encryption. The vulnerability exists in jwe.c because it does not properly validate the authentication tag according to the spec, which may allow an attacker to access unauthorized information in the system by modifying the JWE.

Related

debiancve 1
ubuntucve 1
nessus 22
openvas 10
redhat 7
oraclelinux 2
ubuntu 1
osv 7
redhatcve 1
almalinux 2
fedora 3
alpinelinux 1
cvelist 1
debian 2
rocky 1
prion 1
mageia 1
nvd 1
cve 1
debiancve
debiancve
CVE-2023-37464
2023-07-14 21:15:08
ubuntucve
ubuntucve
CVE-2023-37464
2023-07-14 00:00:00
nessus
nessus
Oracle Linux 8 : mod_auth_openidc:2.3 (ELSA-2023-4418)
2023-08-02 00:00:00
RHEL 8 : mod_auth_openidc:2.3 (RHSA-2023:4410)
2023-08-01 00:00:00
CentOS 8 : mod_auth_openidc:2.3 (CESA-2023:4418)
2023-08-01 00:00:00
openvas
openvas
Fedora: Security Advisory for cjose (FEDORA-2023-cf01e05114)
2023-09-13 00:00:00
openSUSE: Security Advisory for cjose (SUSE-SU-2023:3230-1)
2024-03-04 00:00:00
Fedora: Security Advisory for cjose (FEDORA-2023-151d5b3da1)
2023-09-13 00:00:00
redhat
redhat
(RHSA-2023:4409) Important: mod_auth_openidc:2.3 security update
2023-08-01 13:27:34
(RHSA-2023:4417) Important: cjose security update
2023-08-01 13:48:07
(RHSA-2023:4418) Important: mod_auth_openidc:2.3 security update
2023-08-01 13:49:42
oraclelinux
oraclelinux
mod_auth_openidc:2.3 security update
2023-08-02 00:00:00
cjose security update
2023-08-02 00:00:00
ubuntu
ubuntu
JOSE for C/C++ vulnerability
2023-08-24 00:00:00
osv
osv
Important: mod_auth_openidc:2.3 security update
2023-08-01 00:00:00
cjose vulnerability
2023-08-24 22:02:11
CVE-2023-37464
2023-07-14 21:15:08
redhatcve
redhatcve
CVE-2023-37464
2023-07-18 05:04:24
almalinux
almalinux
Important: cjose security update
2023-08-01 00:00:00
Important: mod_auth_openidc:2.3 security update
2023-08-01 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: cjose-0.6.2.2-2.fc37
2023-09-10 01:20:43
[SECURITY] Fedora 38 Update: cjose-0.6.2.2-2.fc38
2023-09-10 01:21:04
[SECURITY] Fedora 39 Update: cjose-0.6.2.2-2.fc39
2023-09-15 19:05:38
alpinelinux
alpinelinux
CVE-2023-37464
2023-07-14 21:15:08
cvelist
cvelist
CVE-2023-37464 Incorrect Authentication Tag length usage in AES GCM decryption in OpenIDC/cjose
2023-07-14 20:25:18
debian
debian
[SECURITY] [DSA 5472-1] cjose security update
2023-08-08 19:19:32
[SECURITY] [DLA 3515-1] cjose security update
2023-08-04 10:28:48
rocky
rocky
mod_auth_openidc:2.3 security update
2023-08-08 12:34:39
prion
prion
Authentication flaw
2023-07-14 21:15:00
mageia
mageia
Updated cjose packages fix a security vulnerability
2023-12-19 01:41:39
nvd
nvd
CVE-2023-37464
2023-07-14 21:15:08
cve
cve
CVE-2023-37464
2023-07-14 21:15:08

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

EPSS

0.003

Percentile

65.9%

JSON
Related for VERACODE:41361
debiancve1ubuntucve1nessus22openvas10redhat7oraclelinux2ubuntu1osv7redhatcve1almalinux2fedora3alpinelinux1cvelist1debian2rocky1prion1mageia1nvd1cve1