5 matches found
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization in OpenPGPCertificate.getCertificationBy and getDelegationBy in the OpenPGP certificate API. An attacker can have a third-party certification or direct-key trust delegation accepted as if it were issued by the...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization in OpenPGPCertificate.getCertificationBy and getDelegationBy in the OpenPGP certificate API. An attacker can have a third-party certification or direct-key trust delegation accepted as if it were issued by the...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization in OpenPGPCertificate.getCertificationBy and getDelegationBy in the OpenPGP certificate API. An attacker can have a third-party certification or direct-key trust delegation accepted as if it were issued by the...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization in OpenPGPCertificate.getCertificationBy and getDelegationBy in the OpenPGP certificate API. An attacker can have a third-party certification or direct-key trust delegation accepted as if it were issued by the...
EUVD-2026-92002
In Bouncy Castle for Java before 1.86, the high-level OpenPGP certificate API accepted a third-party certification or trust delegation from any component key of the issuing certificate, without requiring that component to have been granted the authority to certify...