Padding Oracle Attack

nimbus-jose-jwt is vulnerable to padding oracle attacks. It does not act correctly if an invalid HMAC is detected in authenticated AES-CBC decryption...

Authentication Bypass

nimbus-jose-jwt is vulnerable to authentication bypass. The bypass exists because the library ignores the checking of integer-overflow when converting length values from bytes to bits. A malicious user can shift Additional Authenticated Data AAD and ciphertext, resulting in a different plaintext...

CVE-2017-12973

Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an invalid HMAC in authenticated AES-CBC decryption, which allows attackers to conduct a padding oracle attack...

CVE-2017-12972

In Nimbus JOSE+JWT before 4.39, there is no integer-overflow check when converting length values from bytes to bits, which allows attackers to conduct HMAC bypass attacks by shifting Additional Authenticated Data AAD and ciphertext so that different plaintext is obtained for the same HMAC...

CVE-2017-12974

Nimbus JOSE+JWT before 4.36 proceeds with ECKey construction without ensuring that the public x and y coordinates are on the specified curve, which allows attackers to conduct an Invalid Curve Attack in environments where the JCE provider lacks the applicable curve validation...

Design/Logic Flaw

Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an invalid HMAC in authenticated AES-CBC decryption, which allows attackers to conduct a padding oracle attack...

Integer overflow

In Nimbus JOSE+JWT before 4.39, there is no integer-overflow check when converting length values from bytes to bits, which allows attackers to conduct HMAC bypass attacks by shifting Additional Authenticated Data AAD and ciphertext so that different plaintext is obtained for the same HMAC...

CVE-2017-12973

Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an invalid HMAC in authenticated AES-CBC decryption, which allows attackers to conduct a padding oracle attack...

CVE-2017-12972

In Nimbus JOSE+JWT before 4.39, there is no integer-overflow check when converting length values from bytes to bits, which allows attackers to conduct HMAC bypass attacks by shifting Additional Authenticated Data AAD and ciphertext so that different plaintext is obtained for the same HMAC...

CVE-2017-12973

Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an invalid HMAC in authenticated AES-CBC decryption, which allows attackers to conduct a padding oracle attack...

CVE-2017-12972

In Nimbus JOSE+JWT before 4.39, there is no integer-overflow check when converting length values from bytes to bits, which allows attackers to conduct HMAC bypass attacks by shifting Additional Authenticated Data AAD and ciphertext so that different plaintext is obtained for the same HMAC...

CVE-2017-12974

Nimbus JOSE+JWT before 4.36 proceeds with ECKey construction without ensuring that the public x and y coordinates are on the specified curve, which allows attackers to conduct an Invalid Curve Attack in environments where the JCE provider lacks the applicable curve validation...

CVE-2017-12973

Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an invalid HMAC in authenticated AES-CBC decryption, which allows attackers to conduct a padding oracle attack...

CVE-2017-12973

Nimbus JOSE+JWT prior to 4.39 proceeds after detecting an invalid HMAC in authenticated AES-CBC decryption, enabling a padding oracle attack. Affected: Nimbus JOSE+JWT library (Connect2id). Risk: padding oracle could leak data or enable exploitation. Remediation: upgrade to version 4.39 or later ...

bio.ferlab:datalake-spark30_2.12 (0.2.39), bio.ferlab:datalake-spark31_2.12 (>=0.1.17, <=0.2.46) +823 more potentially affected by CVE-2017-12974 via com.nimbusds:nimbus-jose-jwt (>=2.10.1, <=4.35)

com.nimbusds:nimbus-jose-jwt MAVEN version =2.10.1, =0.1.17, =0.2.47, =0.11.0, =0.9.0.0, =0.9.0.0, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.1.2, =1.1.2, =1.2.0 - com.alibaba.alink:alinkcoreflink-1.102.11 1.2.0 and more Source cves: CVE-2017-12974 Source advisory: MEND:CVE-2017-12974...

bio.ferlab:datalake-spark30_2.12 (0.2.39), bio.ferlab:datalake-spark31_2.12 (>=0.1.17, <=0.2.46) +877 more potentially affected by CVE-2017-12973 via com.nimbusds:nimbus-jose-jwt (>=2.10.1, <=4.37.1)

com.nimbusds:nimbus-jose-jwt MAVEN version =2.10.1, =0.1.17, =0.2.47, =0.11.0, =0.9.0.0, =0.9.0.0, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.1.2, =1.1.2, =1.2.0 - com.alibaba.alink:alinkcoreflink-1.102.11 1.2.0 and more Source cves: CVE-2017-12973 Source advisory: MEND:CVE-2017-12973...

bio.ferlab:datalake-spark30_2.12 (0.2.39), bio.ferlab:datalake-spark31_2.12 (>=0.1.17, <=0.2.46) +877 more potentially affected by CVE-2017-12972 via com.nimbusds:nimbus-jose-jwt (>=2.10.1, <=4.37.1)

com.nimbusds:nimbus-jose-jwt MAVEN version =2.10.1, =0.1.17, =0.2.47, =0.11.0, =0.9.0.0, =0.9.0.0, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.1.2, =1.1.2, =1.2.0 - com.alibaba.alink:alinkcoreflink-1.102.11 1.2.0 and more Source cves: CVE-2017-12972 Source advisory: MEND:CVE-2017-12972...

CVE-2017-12974

Nimbus JOSE+JWT before 4.36 proceeds with ECKey construction without ensuring that the public x and y coordinates are on the specified curve, which allows attackers to conduct an Invalid Curve Attack in environments where the JCE provider lacks the applicable curve validation...

CVE-2017-12972

CVE-2017-12972 : Nimbus JOSE+JWT before 4.39 has no integer-overflow check when converting length values from bytes to bits, enabling a remote attacker to perform a HMAC bypass by shifting AAD and ciphertext so different plaintext yields the same HMAC. Public records show this vulnerability discu...

CVE-2017-12972

In Nimbus JOSE+JWT before 4.39, there is no integer-overflow check when converting length values from bytes to bits, which allows attackers to conduct HMAC bypass attacks by shifting Additional Authenticated Data AAD and ciphertext so that different plaintext is obtained for the same HMAC...