CVE-2021-22573

🗓️ 03 May 2022 15:45:12Reported by GoogleType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 2049 Views

IDToken verifier allows compromised tokens for custom payload, upgrade to v1.33.3 or abov

Reporter	Title	Published	Views	Family All 45
IBM Security Bulletins	Security Bulletin: There is a vulnerability in google-oauth-client-1.25.0.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2020-7692 and CVE-2021-22573)	15 Jan 202417:26	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in google-oauth-client-1.25.0.jar used by IBM Maximo Asset Management application (CVE-2020-7692 and CVE-2021-22573)	15 Jan 202417:26	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in Google OAuth Client shipped with IBM Tivoli Netcool Impact (CVE-2021-22573)	6 Jul 202204:33	–	ibm
IBM Security Bulletins	Security Bulletin: Google OAuth Client Library for Java as used by IBM QRadar SIEM is vulnerable to verification bypass (CVE-2021-22573)	29 Jun 202315:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Google OAuth Client Library affects watsonx.data	5 Sep 202418:07	–	ibm
Circl	CVE-2021-22573	3 May 202220:34	–	circl
CNNVD	Google google-oauth-java-client 数据伪造问题漏洞	3 May 202200:00	–	cnnvd
Cvelist	CVE-2021-22573 Incorrect signature verification on Google-oauth-java-client	3 May 202215:45	–	cvelist
Debian CVE	CVE-2021-22573	3 May 202215:45	–	debiancve
EUVD	EUVD-2024-1221	3 Oct 202520:07	–	euvd

NVD

Vulners

Node

google oauth_client_library_for_javaRange<1.33.3

[
  {
    "product": "Google-oauth-java-client",
    "vendor": "Google LLC",
    "versions": [
      {
        "lessThan": "1.33.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]