2 matches found
Bouncy Castle FrodoEngine Java Disclosure
The vulnerability of the bcpkix module in the Java Bouncy Castle cryptographic library relates to the use of hidden time channels for data transmission. Exploiting this vulnerability allows a remote attacker to disclose the protected information...
7.8CVSS7.4AI score0.00899EPSS
SaveExploits0References5Affected Software3
GHSA-P93R-85WP-75V3 Bouncy Castle Has Covert Timing Channel Vulnerability
Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all core modules. This vulnerability is associated with program files FrodoEngine.Java. This issue only affects users of the FrodoKEM algorithm involved in the decryption of encapsulations. This issue affects...
9.9CVSS7.1AI score0.00899EPSS
SaveExploits0References18
20