CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-5430

The RSA 1.5 algorithm implementation in the JOSE_JWE class in JWE.php in jose-php before 2.2.1 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack (MMA).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 66.3%

CVSS Severity

CVSS v3 Score 5.3

CVSS v2 Score 5.0

References

Products affected by CVE-2016-5430

Jose-Php Project » Jose-Php » Version: 0.1.0

cpe:2.3:a:jose-php_project:jose-php:0.1.0
Jose-Php Project » Jose-Php » Version: 0.1.1

cpe:2.3:a:jose-php_project:jose-php:0.1.1
Jose-Php Project » Jose-Php » Version: 0.1.2

cpe:2.3:a:jose-php_project:jose-php:0.1.2
Jose-Php Project » Jose-Php » Version: 0.1.3

cpe:2.3:a:jose-php_project:jose-php:0.1.3
Jose-Php Project » Jose-Php » Version: 0.1.4

cpe:2.3:a:jose-php_project:jose-php:0.1.4
Jose-Php Project » Jose-Php » Version: 0.1.5

cpe:2.3:a:jose-php_project:jose-php:0.1.5
Jose-Php Project » Jose-Php » Version: 1.0.0

cpe:2.3:a:jose-php_project:jose-php:1.0.0
Jose-Php Project » Jose-Php » Version: 1.0.1

cpe:2.3:a:jose-php_project:jose-php:1.0.1
Jose-Php Project » Jose-Php » Version: 2.0.0

cpe:2.3:a:jose-php_project:jose-php:2.0.0
Jose-Php Project » Jose-Php » Version: 2.0.1

cpe:2.3:a:jose-php_project:jose-php:2.0.1
Jose-Php Project » Jose-Php » Version: 2.1.0

cpe:2.3:a:jose-php_project:jose-php:2.1.0
Jose-Php Project » Jose-Php » Version: 2.2.0

cpe:2.3:a:jose-php_project:jose-php:2.2.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-5430

Products

Pricing

Contact Us