1 matches found
GHSA-8477-3V39-GGPM Improper Validation of Integrity Check Value in Bouncy Castle
The default BKS keystore use an HMAC that is only 16 bits long, which can allow an attacker to compromise the integrity of a BKS keystore. Bouncy Castle release 1.47 changes the BKS format to a format which uses a 160 bit HMAC instead. This applies to any BKS keystore generated prior to BC 1.47...
4.4CVSS7.1AI score0.00262EPSS
SaveExploits0References6
20