bouncycastle bc-java, apache karaf, oracle banking corporate lending process management +17 lainnya
CVSS 8.1 · High EPSS 7,2%
Kerentanan pada bouncycastle bc-java, apache karaf +18 lainnya. Skor CVSS 3.1 8.1 (High) menurut NVD.
An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed ones that were different.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| bouncycastle | bc-java | Versi 1.65 |
| bouncycastle | bc-java | Versi 1.66 |
| apache | karaf | Versi 4.3.2 |
| oracle | banking corporate lending process management | Versi 14.2.0 |
| oracle | banking corporate lending process management | Versi 14.3.0 |
| oracle | banking corporate lending process management | Versi 14.5.0 |
| oracle | banking credit facilities process management | Versi 14.2.0 |
| oracle | banking credit facilities process management | Versi 14.3.0 |
| oracle | banking credit facilities process management | Versi 14.5.0 |
| oracle | banking extensibility workbench | Versi 14.2.0 |
| oracle | banking extensibility workbench | Versi 14.3.0 |
| oracle | banking extensibility workbench | Versi 14.5.0 |
| oracle | banking supply chain finance | Versi 14.2.0 |
| oracle | banking supply chain finance | Versi 14.3.0 |
| oracle | banking supply chain finance | Versi 14.5.0 |
| oracle | banking virtual account management | Versi 14.2.0 |
| oracle | banking virtual account management | Versi 14.3.0 |
| oracle | banking virtual account management | Versi 14.5.0 |
| oracle | blockchain platform | Semua versi sebelum 21.1.2 |
| oracle | commerce guided search | Versi 11.3.2 |
| oracle | communications application session controller | Versi 3.9m0p3 |
| oracle | communications cloud native core network slice selection function | Versi 1.2.1 |
| oracle | communications convergence | Versi 3.0.2.2.0 |
| oracle | communications pricing design center | Versi 12.0.0.3.0 |
| oracle | communications session report manager | Versi 8.0.0 hingga 8.2.4.0 |
| oracle | communications session route manager | Versi 8.2.0 hingga 8.2.4 |
| oracle | jd edwards enterpriseone tools | Semua versi hingga 9.2.5.3 |
| oracle | peoplesoft enterprise peopletools | Versi 8.56 |
| oracle | peoplesoft enterprise peopletools | Versi 8.57 |
| oracle | peoplesoft enterprise peopletools | Versi 8.58 |
| oracle | utilities framework | Versi 4.3.0.6.0 |
| oracle | utilities framework | Versi 4.4.0.0.0 |
| oracle | utilities framework | Versi 4.4.0.2.0 |
| oracle | utilities framework | Versi 4.4.0.3.0 |
| oracle | webcenter portal | Versi 11.1.1.9.0 |
| oracle | webcenter portal | Versi 12.2.1.3.0 |
| oracle | webcenter portal | Versi 12.2.1.4.0 |
| oracle | communications messaging server | Versi 8.0.2 |
| oracle | communications messaging server | Versi 8.1 |