1 matches found
CVE-2018-5382: Use of a Broken or Risky Cryptographic Algorithm
The default BKS keystore use an HMAC that is only 16 bits long, which can allow an attacker to compromise the integrity of a BKS keystore. Bouncy Castle release 1.47 changes the BKS format to a format which uses a 160 bit HMAC instead. This applies to any BKS keystore generated prior to BC 1.47...
4.4CVSS6.2AI score0.0026EPSS
SaveExploits0References3
20