Lucene search

K
osvGoogleOSV:CVE-2017-12973
HistoryAug 20, 2017 - 4:29 p.m.

CVE-2017-12973

2017-08-2016:29:00
Google
osv.dev
2

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.0%

Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an invalid HMAC in authenticated AES-CBC decryption, which allows attackers to conduct a padding oracle attack.

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.0%