Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:16824
HistoryMay 02, 2019 - 5:28 a.m.

Information Disclosure

2019-05-0205:28:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

EPSS

0.005

Percentile

75.8%

Java is vulnerable to information disclosure. When generating DSA signatures, the security component in OpenJDK fails to check the digest algorithm strength. The use of a digest weaker than the key strength could lead to the generation of signatures that are weaker than expected and attackers may use this vulnerability to obtain potentially confidential information.

References