CVE-2008-4368

Apple Mac OS X 10.5.4-10.5.5 - Weak Java Cryptography Extension Key Size Limitation

Title source: llm
STIX 2.1

Description

The default configuration of Java 1.5 on Apple Mac OS X 10.5.4 and 10.5.5 contains a jurisdiction policy that limits Java Cryptography Extension (JCE) key sizes to 128 bits, which makes it easier for attackers to decrypt ciphertext produced by JCE.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/45650
Mailing List vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT3179

Scores

EPSS 0.0139
EPSS Percentile 69.4%

Details

CWE
CWE-310
Status published
Products (2)
apple/mac_os_x 10.5.4
apple/mac_os_x 10.5.5
Published Oct 01, 2008
Tracked Since Feb 18, 2026