47 matches found
Inadequate Encryption Strength
Overview org.bouncycastle:bcprov-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Inadequate Encryption Strength in the BcKeyStoreSpi.engineLoad method, which for legacy BKS keystore versions 0 and 1 passes hMac.getMacSize 20 bytes...
7.5CVSS5.5AI score0.00184EPSS
SaveExploits0References2
20