Lucene search
Veracode Vulnerability DatabaseVERACODE:30021HistoryApr 19, 2021 - 1:55 a.m.
Padding Oracle Attack
2021-04-1901:55:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
51.3%
jose-node-esm-runtime is vulnerable to padding oracle attack. An attacker is able to exploit a padding error without knowing the decryption key by issuing on average 128*b calls to the padding oracle while decrypting the ciphertext which makes a padding error .
| CPE | Name | Operator | Version |
|---|---|---|---|
| jose-node-esm-runtime | le | 3.11.3 |
Related
osv
osv
Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-esm-runtime
2021-04-19 14:59:06
CVE-2021-29445
2021-04-16 22:15:14
cvelist
cvelist
prion
prion
Code injection
2021-04-16 22:15:00
cve
cve
CVE-2021-29445
2021-04-16 22:15:14
nvd
nvd
CVE-2021-29445
2021-04-16 22:15:14
github
github
