Weak Encryption

libcjose.so is vulnerable to weak encryption. The vulnerability exists in jwe.c because it does not properly validate the authentication tag according to the spec, which may allow an attacker to access unauthorized information in the system by modifying the JWE...