3 matches found
CVE-2026-45289: Improper Authentication
CloudburstMC Protocol is a protocol library for Minecraft Bedrock Edition. Prior to version 3.0.0.Beta12-20260420.182526-15, CloudburstMC Protocol is partially missing validation for FULL type authentication tokens Cloudburst/Protocol. This vulnerability impacts publicly accessible software...
WS-2023-0322
The server uses ECDH to calculate a shared secret for the symmetric encryption key used to encrypt network packets after logging in. ECDH requires that the keys used must both belong to the same elliptic curve. In Minecraft: Bedrock Edition, the curve used is "secp384r1". Using any other curve fo...
PT-2023-32987
Name of the Vulnerable Software and Affected Versions Minecraft: Bedrock Edition versions prior to 4.23.1 Minecraft: Bedrock Edition versions prior to 5.3.1 Description The issue arises from the server's use of ECDH to calculate a shared secret for symmetric encryption key used to encrypt network...