CVE-2016-6298

MEDIUM

jwcrypto < 0.3.2 - Exposure of Sensitive Information via RSA 1.5 Algorithm

Title source: llm

Description

The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack (MMA).

References (5)

Core 5

Core References

Issue Tracking, Vendor Advisory x_refsource_confirm

https://github.com/latchset/jwcrypto/issues/65

Issue Tracking, Patch x_refsource_confirm

https://github.com/latchset/jwcrypto/pull/66

Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/92729

Patch, Vendor Advisory x_refsource_confirm

https://github.com/latchset/jwcrypto/releases/tag/v0.3.2

Issue Tracking, Patch, Vendor Advisory x_refsource_confirm

https://github.com/latchset/jwcrypto/commit/eb5be5bd94c8cae1d7f3ba9801377084d8e5a7ba

Scores

CVSS v3 5.3

EPSS 0.0223

EPSS Percentile 80.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-200

Status published

Products (2)

latchset/jwcrypto < 0.3.2

pypi/jwcrypto 0 - 0.3.2PyPI

Published Sep 01, 2016

Tracked Since Feb 18, 2026