Nablarch Incomplete Cryptography

2022-05-1301:08:15

Google

osv.dev

0.006 Low

EPSS

Percentile

78.8%

JSON

An incomplete cryptography of the data store function by using hidden tag in Nablarch 5 (5, and 5u1 to 5u13) allows remote attackers to obtain information of the stored data, to register invalid value, or alter the value via unspecified vectors.

CPENameOperatorVersion
com.nablarch.framework:nablarch-fw-webeq1.4.0
com.nablarch.framework:nablarch-fw-webeq1.4.2
com.nablarch.framework:nablarch-fw-webeq1.3.0
com.nablarch.framework:nablarch-fw-webeq1.5.0
com.nablarch.framework:nablarch-fw-webeq1.2.2
com.nablarch.framework:nablarch-fw-webeq1.4.1
com.nablarch.framework:nablarch-fw-webeq1.2.3

Name	Operator	Version
com.nablarch.framework:nablarch-fw-web	eq	1.4.0
com.nablarch.framework:nablarch-fw-web	eq	1.4.2
com.nablarch.framework:nablarch-fw-web	eq	1.3.0
com.nablarch.framework:nablarch-fw-web	eq	1.5.0
com.nablarch.framework:nablarch-fw-web	eq	1.2.2
com.nablarch.framework:nablarch-fw-web	eq	1.4.1
com.nablarch.framework:nablarch-fw-web	eq	1.2.3