Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the process handling AES packet cipher operations when the same Java array is used as both input and output. An attacker can obtain the raw AES key instead of the expected ciphertext by exploiting the way JNI's...