Lucene search

CVE-2017-12972

🗓️ 20 Aug 2017 16:00:00Reported by mitreType

Insecure Nimbus JOSE+JWT integer-overflow vulnerabilit

Reporter	Title	Published	Views	Family All 15
Veracode	Authentication Bypass	21 Aug 201701:57	–	veracode
CVE	CVE-2017-12972	20 Aug 201716:29	–	cve
OSV	Nimbus JOSE+JWT missing overflow check	13 May 202201:30	–	osv
OSV	CVE-2017-12972	20 Aug 201716:29	–	osv
Github Security Blog	Nimbus JOSE+JWT missing overflow check	13 May 202201:30	–	github
Prion	Integer overflow	20 Aug 201716:29	–	prion
NVD	CVE-2017-12972	20 Aug 201716:29	–	nvd
IBM Security Bulletins	Security Bulletin: Three vulnerabilities in Nimbus JOSE+JWT affect IBM Spectrum Conductor	3 Jun 202008:30	–	ibm
IBM Security Bulletins	Security Bulletin: Public disclosed vulnerability from Nimbus-JOSE-JWT affects IBM Spectrum LSF	6 Mar 201905:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Nimbus-JOSE-JWT affect IBM Spectrum Symphony	17 Apr 202008:04	–	ibm

Source	Link
lists	www.lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E
bitbucket	www.bitbucket.org/connect2id/nimbus-jose-jwt/issues/224/byte-to-bit-overflow-in-cbc
bitbucket	www.bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt
bitbucket	www.bitbucket.org/connect2id/nimbus-jose-jwt/commits/0d2bd649ea386539220d4facfe1f65eb1dadb86c

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

20 Aug 2017 16:00Current

7.6High risk

Vulners AI Score7.6

EPSS0.002