Legion Of The Bouncy Castle Bouncy Castle vulnerabilities

1 known vulnerability affecting legion_of_the_bouncy_castle/bouncy_castle.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2018-5382MEDIUMCVSS 4.4≥ all, < 1.472018-04-16
CVE-2018-5382 [MEDIUM] CWE-327 CVE-2018-5382: The default BKS keystore use an HMAC that is only 16 bits long, which can allow an attacker to compr The default BKS keystore use an HMAC that is only 16 bits long, which can allow an attacker to compromise the integrity of a BKS keystore. Bouncy Castle release 1.47 changes the BKS format to a format which uses a 160 bit HMAC instead. This applies to any BKS keystore generated prior to BC 1.47. For situations where people need to create the files for
cvelistv5nvd