Covert timing channel at org.bouncycastle:bcprov-jdk18on dependency in Bamboo Data Center

🗓️ 11 May 2026 23:29:53Reported by security-metrics-botType

Covert timing channel vulnerability in Bamboo Data Center; high severity information disclosure; upgrade to 10.2.19+ or 12.1.7+.

Reporter	Title	Published	Views	Family All 156
IBM Security Bulletins	Security Bulletin: Due to the use of Bouncy Castle Inc. BC-JAVA bcprov IBM webMethods Managed File Transfer is vulnerable to a Covert Timing Channel vulnerability and Use of a Broken or Risky Cryptographic Algorithm vulnerability	6 Aug 202613:39	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by vulnerabilities in Bouncy Castle Crypto (CVE-2025-14813, CVE-2026-5598)	21 May 202615:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rational Developer for i (CVE-2026-3505, CVE-2025-14813, CVE-2026-0636, CVE-2026-5598, CVE-2026-33671, CVE-2026-33672, CVE-2026-5588, CVE-2026-40175)	8 Jun 202613:55	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Use of a Broken or Risky Cryptographic Algorithm, Covert Timing Channel (CVE-2025-14813, CVE-2026-5598)	16 Jun 202614:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling External Authentication Server is vulnerable to multiple issues	27 Jul 202606:00	–	ibm
IBM Security Bulletins	Security Bulletin:IBM Sterling Global Availability Mailbox uses bcprov-jdk15to18-1.78.1.jar, which is affected by CVE-2025-14813 and CVE-2026-5598, exposing the system to potential security risks including unauthorized access, denial of service.	8 Aug 202604:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in Bouncy Castle bcprov-jdk (CVE-2025-14813, CVE-2026-5598)	27 May 202614:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	1 Jul 202617:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Secure Proxy is vulnerable to multiple issues	28 Jul 202617:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® federated server is affected by vulnerabilities in bcprov-jdk18on-1.82 and bcpkix-jdk18on-1.82.	12 Aug 202615:07	–	ibm