CPE Details
Bouncy Castle Java Distribution (bc-java) 1.57
1.57
2025-05-12
15h37 +00:00
15h37 +00:00
2025-05-12
15h37 +00:00
15h37 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:bouncycastle:bc-java:1.57:*:*:*:*:*:*:*
Informations
Vendor
bouncycastleProduct
bc-javaVersion
1.57Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| Bouncy Castle For Java before 1.74 is affected by an LDAP injection vulnerability. The vulnerability only affects applications that use an LDAP CertStore from Bouncy Castle to validate X.509 certificates. During the certificate validation process, Bouncy Castle inserts the certificate's Subject Name into an LDAP search filter without any escaping, which leads to an LDAP injection vulnerability. | 5.3 |
Moyen |
||
| Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fixed in versions BC 1.60 beta 4 and later, BC-FJA 1.0.2 and later. | 7.5 |
Haute |
||
| BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable application. This vulnerability is referred to as "ROBOT." | 7.5 |
Haute |
