Tracker / CVE-2020-28052
CVE-2020-28052
Alta 8.1
An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed ones that were different.
Prodotti e versioni affette
| apache | karaf |
|---|---|
| bouncycastle | bc-java |
| oracle | banking_corporate_lending_process_management |
| oracle | banking_credit_facilities_process_management |
| oracle | banking_extensibility_workbench |
| oracle | banking_supply_chain_finance |
| oracle | banking_virtual_account_management |
| oracle | blockchain_platform · … → 21.1.2 |
| oracle | commerce_guided_search |
| oracle | communications_application_session_controller |
| oracle | communications_cloud_native_core_network_slice_selection_function |
| oracle | communications_convergence |
| oracle | communications_messaging_server |
| oracle | communications_pricing_design_center |
| oracle | communications_session_report_manager · 8.0.0 → 8.2.4.0 |
| oracle | communications_session_route_manager · 8.2.0 → 8.2.4 |
| oracle | jd_edwards_enterpriseone_tools · … → 9.2.5.3 |
| oracle | peoplesoft_enterprise_peopletools |
| oracle | utilities_framework |
| oracle | webcenter_portal |
Analisi
Questa pagina non è ancora indicizzabile.Finché non contiene un’analisi originale — cosa espone davvero, come verificare in due minuti se un sistema è stato toccato, cosa fare se lo è stato — la pagina resta noindex. È il database a deciderlo, non il modello di pagina.