Lucene search
PRIOn knowledge basePRION:CVE-2017-16007HistoryJun 04, 2018 - 7:29 p.m.
Code injection
2018-06-0419:29:00
PRIOn knowledge base
www.prio-n.com
3
node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for current web browsers and node.js-based servers. node-jose earlier than version 0.9.3 is vulnerable to an invalid curve attack. This allows an attacker to recover the private secret key when JWE with Key Agreement with Elliptic Curve Diffie-Hellman Ephemeral Static (ECDH-ES) is used.
Related
nvd
nvd
CVE-2017-16007
2018-06-04 19:29:00
cvelist
cvelist
CVE-2017-16007
2018-04-26 00:00:00
cve
cve
CVE-2017-16007
2018-06-04 19:29:00
nodejs
nodejs
Invalid Curve Attack
2017-03-13 19:16:33
github
github
Invalid Curve Attack in node-jose
2018-07-20 21:10:14
veracode
veracode
Invalid Curve Attack
2017-03-14 00:10:36
osv
osv
CVE-2017-16007
2018-06-04 19:29:00
Invalid Curve Attack in node-jose
2018-07-20 21:10:14
