CVE-2022-29249
HIGHJavaEZ 1.6 - Use of a Broken or Risky Cryptographic Algorithm
Title source: llmDescription
JavaEZ is a library that adds new functions to make Java easier. A weakness in JavaEZ 1.6 allows force decryption of locked text by unauthorized actors. The issue is NOT critical for non-secure applications, however may be critical in a situation where the highest levels of security are required. This issue ONLY affects v1.6 and does not affect anything pre-1.6. The vulnerability has been patched in release 1.7. Currently, there is no way to fix the issue without upgrading.
References (2)
Core 2
Core References
Third Party Advisory x_refsource_confirm
https://github.com/JavaEZLib/JavaEZ/security/advisories/GHSA-67fj-6w6m-w5j8
Release Notes, Third Party Advisory x_refsource_misc
https://github.com/JavaEZLib/JavaEZ/releases/tag/1.7
Scores
CVSS v3
7.5
EPSS
0.0068
EPSS Percentile
47.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-327
CWE-326
CWE-328
Status
published
Products (2)
io.github.javaezlib/JavaEZ
1.6 - 1.7Maven
javaez_project/javaez
1.6
Published
May 24, 2022
Tracked Since
Feb 18, 2026