Legion of the Bouncy Castle Java Cryptography API Bleichenbacher Oracle Vulnerability
The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2007-6721US | high10.0 | — | ||
The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "… | ||||
02
references
External citations — patches, advisories, analysis.
- http://www.bouncycastle.org/devmailarchive/msg08195.htmlWEB
- https://github.com/bcgit/bc-javaPACKAGE
- https://nvd.nist.gov/vuln/detail/CVE-2007-6721ADVISORY
- https://web.archive.org/web/20071022023551/http://www.bouncycastle.org/csharpWEB
- https://web.archive.org/web/20080316202318/http://www.bouncycastle.org:80/releasenotes.htmlWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan