CVE-2008-4368

The default configuration of Java 1.5 on Apple Mac OS X 10.5.4 and 10.5.5 contains a jurisdiction policy that limits Java Cryptography Extension JCE key sizes to 128 bits, which makes it easier for attackers to decrypt ciphertext produced by JCE...

CVE-2008-4368

The CVE-2008-4368 notice concerns macOS X 10.5.4/10.5.5 running Java 1.5, where the default jurisdiction policy caps JCE key sizes at 128 bits. This weakens cryptographic strength and can make decryption of JCE-produced ciphertext easier, per the NVD entry. Connected sources corroborate the same ...