Bouncycastle Legion-Of-The-Bouncy-Castle vulnerabilities

1 known vulnerability affecting bouncycastle/legion-of-the-bouncy-castle.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2020-26939MEDIUMCVSS 5.3fixed in 1.612020-11-02
CVE-2020-26939 [MEDIUM] CWE-203 CVE-2020-26939: In Legion of the Bouncy Castle BC before 1.61 and BC-FJA before 1.0.1.2, attackers can obtain sensit In Legion of the Bouncy Castle BC before 1.61 and BC-FJA before 1.0.1.2, attackers can obtain sensitive information about a private exponent because of Observable Differences in Behavior to Error Inputs. This occurs in org.bouncycastle.crypto.encodings.OAEPEncoding. Sending invalid ciphertext that decrypts to a short payload in the OAEP Decoder coul
nvd