Lucene search

CVE-2020-28052

🗓️ 18 Dec 2020 01:12:15Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 13 Media mentions👁 298 Views

An issue in Legion of the Bouncy Castle BC Java allows incorrect passwords to indicate they match with previously hashed ones

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 50
OSV	Logic error in Legion of the Bouncy Castle BC Java	30 Apr 202116:14	–	osv
OSV	RHSA-2021:0874 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.6 security update	13 Sep 202422:43	–	osv
OSV	RHSA-2021:0872 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.6 security update	13 Sep 202422:43	–	osv
OSV	RHSA-2021:0873 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.6 security update	13 Sep 202422:44	–	osv
OSV	RHSA-2024:10208 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.8 on RHEL 7 security update	26 Nov 202407:31	–	osv
OSV	OPENSUSE-SU-2024:10661-1 bouncycastle-1.68-3.2 on GA media	15 Jun 202400:00	–	osv
FreeBSD	bouncycastle15 -- bcrypt password checking vulnerability	2 Nov 202000:00	–	freebsd
Github Security Blog	Logic error in Legion of the Bouncy Castle BC Java	30 Apr 202116:14	–	github
Cvelist	CVE-2020-28052	18 Dec 202000:52	–	cvelist
Debian CVE	CVE-2020-28052	18 Dec 202001:15	–	debiancve

Nvd

Node

bouncycastle legion-of-the-bouncy-castle-java-crytography-apiMatch1.65

bouncycastle legion-of-the-bouncy-castle-java-crytography-apiMatch1.66

Node

apache karafMatch4.3.2

Node

oracle banking_corporate_lending_process_managementMatch14.2.0

oracle banking_corporate_lending_process_managementMatch14.3.0

oracle banking_corporate_lending_process_managementMatch14.5.0

oracle banking_credit_facilities_process_managementMatch14.2.0

oracle banking_credit_facilities_process_managementMatch14.3.0

oracle banking_credit_facilities_process_managementMatch14.5.0

oracle banking_extensibility_workbenchMatch14.2.0

oracle banking_extensibility_workbenchMatch14.3.0

oracle banking_extensibility_workbenchMatch14.5.0

oracle banking_supply_chain_financeMatch14.2.0

oracle banking_supply_chain_financeMatch14.3.0

oracle banking_supply_chain_financeMatch14.5.0

oracle banking_virtual_account_managementMatch14.2.0

oracle banking_virtual_account_managementMatch14.3.0

oracle banking_virtual_account_managementMatch14.5.0

oracle blockchain_platformRange<21.1.2

oracle commerce_guided_searchMatch11.3.2

oracle communications_application_session_controllerMatch3.9m0p3

oracle communications_cloud_native_core_network_slice_selection_functionMatch1.2.1

oracle communications_convergenceMatch3.0.2.2.0

oracle communications_pricing_design_centerMatch12.0.0.3.0

oracle communications_session_report_managerRange8.0.0–8.2.4.0

oracle communications_session_route_managerRange8.2.0–8.2.4

oracle jd_edwards_enterpriseone_toolsRange≤9.2.5.3

oracle peoplesoft_enterprise_peopletoolsMatch8.56

oracle peoplesoft_enterprise_peopletoolsMatch8.57

oracle peoplesoft_enterprise_peopletoolsMatch8.58

oracle utilities_frameworkMatch4.3.0.6.0

oracle utilities_frameworkMatch4.4.0.0.0

oracle utilities_frameworkMatch4.4.0.2.0

oracle utilities_frameworkMatch4.4.0.3.0

oracle webcenter_portalMatch11.1.1.9.0

oracle webcenter_portalMatch12.2.1.3.0

oracle webcenter_portalMatch12.2.1.4.0

oracle communications_messaging_serverMatch8.0.2

oracle communications_messaging_serverMatch8.1

Source	Link
lists	www.lists.apache.org/thread.html/rdcbad6d8ce72c79827ed8c635f9a62dd919bb21c94a0b64cab2efc31%40%3Cissues.karaf.apache.org%3E
lists	www.lists.apache.org/thread.html/r77af3ac7c3bfbd5454546e13faf7aec21d627bdcf36c9ca240436b94%40%3Cissues.karaf.apache.org%3E
bouncycastle	www.bouncycastle.org/releasenotes.html
lists	www.lists.apache.org/thread.html/r4e1619cfefcd031fac62064a3858f5c9229eef907bd5d8ef14c594fc%40%3Cissues.karaf.apache.org%3E
lists	www.lists.apache.org/thread.html/r954d80fd18e9dafef6e813963eb7e08c228151c2b6268ecd63b35d1f%40%3Ccommits.druid.apache.org%3E
synopsys	www.synopsys.com/blogs/software-security/cve-2020-28052-bouncy-castle/
lists	www.lists.apache.org/thread.html/r37d332c0bf772f4982d1fdeeb2f88dd71dab6451213e69e43734eadc%40%3Ccommits.pulsar.apache.org%3E
oracle	www.oracle.com/security-alerts/cpuapr2022.html
lists	www.lists.apache.org/thread.html/r30a139c165b3da6e0d5536434ab1550534011b1fdfcd2f5d95892c5b%40%3Cissues.karaf.apache.org%3E
oracle	www.oracle.com/security-alerts/cpujul2022.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Dec 2020 01:15Current

7.7High risk

Vulners AI Score7.7

CVSS26.8

CVSS38.1

EPSS0.05818