Uploaded image for project: 'AMQ Streams'
  1. AMQ Streams
  2. ENTMQST-5885

CVE-2023-52428 Nimbus JOSE+JWT before 9.37.2

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • 2.7.0.GA
    • None
    • None
    • None

      In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a large JWE p2c header value (aka iteration count) for the PasswordBasedDecrypter (PBKDF2) component.

      https://www.cve.org/CVERecord?id=CVE-2023-52428

            Unassigned Unassigned
            chfoley Christopher Foley
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: