PT-2018-6036

Name of the Vulnerable Software and Affected Versions: node-jose versions prior to 0.9.3 Description: The issue allows an attacker to recover the private secret key when JWE with Key Agreement with Elliptic Curve Diffie-Hellman Ephemeral Static ECDH-ES is used, due to an invalid curve attack...

CVE-2017-7781/CVE-2017-10176: Issue with elliptic curve addition in mixed Jacobian-affine coordinates in Firefox/Java

tl;dr Firefox and Java suffered from a moderate vulnerability affecting the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates where it can yield a result POINTATINFINITY when it should not. Introduction Few months ago I was working on a vulnerability affecting th...

JSON Libraries Patched Against Invalid Curve Crypto Attack

A number of JSON libraries using the JSON Web Encryption specification JWE to create, sign and encrypt access tokens have been patched against an attack that allows for the recovery of a private key. Researcher Antonio Sanso of Adobe said the go-jose, node-jose, jose2go, Nimbus JOSE+WT and jose4...

Invalid Curve Attack

Overview Affected versions of node-jose are vulnerable to an invalid curve attack. This allows an attacker to recover the private secret key when JWE with Key Agreement with Elliptic Curve Diffie-Hellman Ephemeral Static ECDH-ES is used. Proof of Concept Recommendation Update to version 0.9.3 or...

[SECURITY] Fedora 23 Update: python-jwcrypto-0.3.2-1.fc23

Implements JWK,JWS,JWE specifications using python-cryptography...

[SECURITY] Fedora 24 Update: python-jwcrypto-0.3.2-1.fc24

Implements JWK,JWS,JWE specifications using python-cryptography...

[SECURITY] Fedora 25 Update: python-jwcrypto-0.3.2-1.fc25

Implements JWK,JWS,JWE specifications using python-cryptography...

Jose-php Information Disclosure Vulnerability

jose-php is suitable for PHP JSON object signature and encryption library . A security vulnerability exists in versions of jose-php before 2.2.1, due to the lack of a random padding mechanism in the implementation of the RSA 1.5 algorithm in the JWE.php/JOSEJWE class. A remote attacker can obtain...

Code injection

The GatewayScript modules on IBM DataPower Gateways with software 7.2.0.x before 7.2.0.1, when the GatewayScript decryption API or a JWE decrypt action is enabled, do not require signed ciphertext data, which makes it easier for remote attackers to obtain plaintext data via a padding-oracle attac...

PT-2015-7550

Name of the Vulnerable Software and Affected Versions IBM DataPower Gateways versions 7.2.0.x before 7.2.0.1 Description The issue allows remote attackers to obtain plaintext data via a padding-oracle attack when the GatewayScript decryption API or a JWE decrypt action is enabled, as the...