Uploaded image for project: 'AMQ Streams'
  1. AMQ Streams
  2. ENTMQST-5885

CVE-2023-52428 Nimbus JOSE+JWT before 9.37.2

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Undefined Undefined
    • 2.5.2.GA, 2.7.0.GA
    • None
    • None
    • None

      In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a large JWE p2c header value (aka iteration count) for the PasswordBasedDecrypter (PBKDF2) component.

      https://www.cve.org/CVERecord?id=CVE-2023-52428

              Unassigned Unassigned
              chfoley Christopher Foley
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: