Security Bulletin: Public disclosed vulnerability from Bouncy Castle affects Platform HPC

Summary Public disclosed vulnerability CVE-2018-5382 from Bouncy Castle fix was addressed by Platform HPC Vulnerability Details Data not yet populated Affected Products and Versions Platform HPC Version 4.1.1, 4.1.1.1, 4.2.0 and 4.2.1 Remediation/Fixes None. Workarounds and Mitigations Product |...

CVE-2018-5382

CVE-2018-5382 involves Bouncy Castle where the default BKS keystore uses an HMAC only 16 bits long, enabling brute-force attempts to compromise keystore integrity. Technical details from connected docs show that BC 1.47 updated the BKS format to use a 160-bit HMAC, addressing the issue for keysto...