CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-12974

Nimbus JOSE+JWT before 4.36 proceeds with ECKey construction without ensuring that the public x and y coordinates are on the specified curve, which allows attackers to conduct an Invalid Curve Attack in environments where the JCE provider lacks the applicable curve validation.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 48.5%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2017-12974

Connect2id » Nimbus Jose+jwt » Version: 1.0

cpe:2.3:a:connect2id:nimbus_jose+jwt:1.0
Connect2id » Nimbus Jose+jwt » Version: 1.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:1.1
Connect2id » Nimbus Jose+jwt » Version: 1.10

cpe:2.3:a:connect2id:nimbus_jose+jwt:1.10
Connect2id » Nimbus Jose+jwt » Version: 1.11

cpe:2.3:a:connect2id:nimbus_jose+jwt:1.11
Connect2id » Nimbus Jose+jwt » Version: 1.12

cpe:2.3:a:connect2id:nimbus_jose+jwt:1.12
Connect2id » Nimbus Jose+jwt » Version: 1.2

cpe:2.3:a:connect2id:nimbus_jose+jwt:1.2
Connect2id » Nimbus Jose+jwt » Version: 1.3

cpe:2.3:a:connect2id:nimbus_jose+jwt:1.3
Connect2id » Nimbus Jose+jwt » Version: 1.4

cpe:2.3:a:connect2id:nimbus_jose+jwt:1.4
Connect2id » Nimbus Jose+jwt » Version: 1.5

cpe:2.3:a:connect2id:nimbus_jose+jwt:1.5
Connect2id » Nimbus Jose+jwt » Version: 1.6

cpe:2.3:a:connect2id:nimbus_jose+jwt:1.6
Connect2id » Nimbus Jose+jwt » Version: 1.7

cpe:2.3:a:connect2id:nimbus_jose+jwt:1.7
Connect2id » Nimbus Jose+jwt » Version: 1.8

cpe:2.3:a:connect2id:nimbus_jose+jwt:1.8
Connect2id » Nimbus Jose+jwt » Version: 1.9

cpe:2.3:a:connect2id:nimbus_jose+jwt:1.9
Connect2id » Nimbus Jose+jwt » Version: 1.9.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:1.9.1
Connect2id » Nimbus Jose+jwt » Version: 2.0

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.0
Connect2id » Nimbus Jose+jwt » Version: 2.0.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.0.1
Connect2id » Nimbus Jose+jwt » Version: 2.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.1
Connect2id » Nimbus Jose+jwt » Version: 2.1.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.1.1
Connect2id » Nimbus Jose+jwt » Version: 2.10

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.10
Connect2id » Nimbus Jose+jwt » Version: 2.10.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.10.1
Connect2id » Nimbus Jose+jwt » Version: 2.11.0

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.11.0
Connect2id » Nimbus Jose+jwt » Version: 2.12.0

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.12.0
Connect2id » Nimbus Jose+jwt » Version: 2.13.0

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.13.0
Connect2id » Nimbus Jose+jwt » Version: 2.13.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.13.1
Connect2id » Nimbus Jose+jwt » Version: 2.14

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.14
Connect2id » Nimbus Jose+jwt » Version: 2.15

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.15
Connect2id » Nimbus Jose+jwt » Version: 2.15.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.15.1
Connect2id » Nimbus Jose+jwt » Version: 2.15.2

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.15.2
Connect2id » Nimbus Jose+jwt » Version: 2.16

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.16
Connect2id » Nimbus Jose+jwt » Version: 2.17

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.17
Connect2id » Nimbus Jose+jwt » Version: 2.17.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.17.1
Connect2id » Nimbus Jose+jwt » Version: 2.17.2

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.17.2
Connect2id » Nimbus Jose+jwt » Version: 2.18

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.18
Connect2id » Nimbus Jose+jwt » Version: 2.18.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.18.1
Connect2id » Nimbus Jose+jwt » Version: 2.18.2

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.18.2
Connect2id » Nimbus Jose+jwt » Version: 2.19

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.19
Connect2id » Nimbus Jose+jwt » Version: 2.19.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.19.1
Connect2id » Nimbus Jose+jwt » Version: 2.2

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.2
Connect2id » Nimbus Jose+jwt » Version: 2.20

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.20
Connect2id » Nimbus Jose+jwt » Version: 2.21

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.21
Connect2id » Nimbus Jose+jwt » Version: 2.22

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.22
Connect2id » Nimbus Jose+jwt » Version: 2.22.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.22.1
Connect2id » Nimbus Jose+jwt » Version: 2.23

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.23
Connect2id » Nimbus Jose+jwt » Version: 2.24

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.24
Connect2id » Nimbus Jose+jwt » Version: 2.25

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.25
Connect2id » Nimbus Jose+jwt » Version: 2.26

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.26
Connect2id » Nimbus Jose+jwt » Version: 2.26.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.26.1
Connect2id » Nimbus Jose+jwt » Version: 2.3

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.3
Connect2id » Nimbus Jose+jwt » Version: 2.4

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.4
Connect2id » Nimbus Jose+jwt » Version: 2.5

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.5
Connect2id » Nimbus Jose+jwt » Version: 2.6

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.6
Connect2id » Nimbus Jose+jwt » Version: 2.7

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.7
Connect2id » Nimbus Jose+jwt » Version: 2.8

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.8
Connect2id » Nimbus Jose+jwt » Version: 2.9

cpe:2.3:a:connect2id:nimbus_jose+jwt:2.9
Connect2id » Nimbus Jose+jwt » Version: 3.0

cpe:2.3:a:connect2id:nimbus_jose+jwt:3.0
Connect2id » Nimbus Jose+jwt » Version: 3.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:3.1
Connect2id » Nimbus Jose+jwt » Version: 3.1.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:3.1.1
Connect2id » Nimbus Jose+jwt » Version: 3.1.2

cpe:2.3:a:connect2id:nimbus_jose+jwt:3.1.2
Connect2id » Nimbus Jose+jwt » Version: 3.10

cpe:2.3:a:connect2id:nimbus_jose+jwt:3.10
Connect2id » Nimbus Jose+jwt » Version: 3.2

cpe:2.3:a:connect2id:nimbus_jose+jwt:3.2
Connect2id » Nimbus Jose+jwt » Version: 3.2.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:3.2.1
Connect2id » Nimbus Jose+jwt » Version: 3.2.2

cpe:2.3:a:connect2id:nimbus_jose+jwt:3.2.2
Connect2id » Nimbus Jose+jwt » Version: 3.3

cpe:2.3:a:connect2id:nimbus_jose+jwt:3.3
Connect2id » Nimbus Jose+jwt » Version: 3.4

cpe:2.3:a:connect2id:nimbus_jose+jwt:3.4
Connect2id » Nimbus Jose+jwt » Version: 3.5

cpe:2.3:a:connect2id:nimbus_jose+jwt:3.5
Connect2id » Nimbus Jose+jwt » Version: 3.6

cpe:2.3:a:connect2id:nimbus_jose+jwt:3.6
Connect2id » Nimbus Jose+jwt » Version: 3.7

cpe:2.3:a:connect2id:nimbus_jose+jwt:3.7
Connect2id » Nimbus Jose+jwt » Version: 3.8

cpe:2.3:a:connect2id:nimbus_jose+jwt:3.8
Connect2id » Nimbus Jose+jwt » Version: 3.8.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:3.8.1
Connect2id » Nimbus Jose+jwt » Version: 3.8.2

cpe:2.3:a:connect2id:nimbus_jose+jwt:3.8.2
Connect2id » Nimbus Jose+jwt » Version: 3.9

cpe:2.3:a:connect2id:nimbus_jose+jwt:3.9
Connect2id » Nimbus Jose+jwt » Version: 3.9.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:3.9.1
Connect2id » Nimbus Jose+jwt » Version: 3.9.2

cpe:2.3:a:connect2id:nimbus_jose+jwt:3.9.2
Connect2id » Nimbus Jose+jwt » Version: 4.0

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.0
Connect2id » Nimbus Jose+jwt » Version: 4.0.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.0.1
Connect2id » Nimbus Jose+jwt » Version: 4.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.1
Connect2id » Nimbus Jose+jwt » Version: 4.1.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.1.1
Connect2id » Nimbus Jose+jwt » Version: 4.10

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.10
Connect2id » Nimbus Jose+jwt » Version: 4.11

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.11
Connect2id » Nimbus Jose+jwt » Version: 4.11.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.11.1
Connect2id » Nimbus Jose+jwt » Version: 4.11.2

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.11.2
Connect2id » Nimbus Jose+jwt » Version: 4.12

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.12
Connect2id » Nimbus Jose+jwt » Version: 4.13

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.13
Connect2id » Nimbus Jose+jwt » Version: 4.13.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.13.1
Connect2id » Nimbus Jose+jwt » Version: 4.14

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.14
Connect2id » Nimbus Jose+jwt » Version: 4.15

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.15
Connect2id » Nimbus Jose+jwt » Version: 4.15.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.15.1
Connect2id » Nimbus Jose+jwt » Version: 4.16

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.16
Connect2id » Nimbus Jose+jwt » Version: 4.16.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.16.1
Connect2id » Nimbus Jose+jwt » Version: 4.16.2

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.16.2
Connect2id » Nimbus Jose+jwt » Version: 4.17

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.17
Connect2id » Nimbus Jose+jwt » Version: 4.18

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.18
Connect2id » Nimbus Jose+jwt » Version: 4.19

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.19
Connect2id » Nimbus Jose+jwt » Version: 4.2

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.2
Connect2id » Nimbus Jose+jwt » Version: 4.20

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.20
Connect2id » Nimbus Jose+jwt » Version: 4.21

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.21
Connect2id » Nimbus Jose+jwt » Version: 4.22

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.22
Connect2id » Nimbus Jose+jwt » Version: 4.23

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.23
Connect2id » Nimbus Jose+jwt » Version: 4.24

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.24
Connect2id » Nimbus Jose+jwt » Version: 4.25

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.25
Connect2id » Nimbus Jose+jwt » Version: 4.26

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.26
Connect2id » Nimbus Jose+jwt » Version: 4.26.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.26.1
Connect2id » Nimbus Jose+jwt » Version: 4.27

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.27
Connect2id » Nimbus Jose+jwt » Version: 4.27.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.27.1
Connect2id » Nimbus Jose+jwt » Version: 4.28

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.28
Connect2id » Nimbus Jose+jwt » Version: 4.29

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.29
Connect2id » Nimbus Jose+jwt » Version: 4.3

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.3
Connect2id » Nimbus Jose+jwt » Version: 4.3.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.3.1
Connect2id » Nimbus Jose+jwt » Version: 4.30

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.30
Connect2id » Nimbus Jose+jwt » Version: 4.31

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.31
Connect2id » Nimbus Jose+jwt » Version: 4.31.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.31.1
Connect2id » Nimbus Jose+jwt » Version: 4.32

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.32
Connect2id » Nimbus Jose+jwt » Version: 4.33

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.33
Connect2id » Nimbus Jose+jwt » Version: 4.34

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.34
Connect2id » Nimbus Jose+jwt » Version: 4.34.1

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.34.1
Connect2id » Nimbus Jose+jwt » Version: 4.34.2

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.34.2
Connect2id » Nimbus Jose+jwt » Version: 4.35

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.35
Connect2id » Nimbus Jose+jwt » Version: 4.4

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.4
Connect2id » Nimbus Jose+jwt » Version: 4.5

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.5
Connect2id » Nimbus Jose+jwt » Version: 4.6

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.6
Connect2id » Nimbus Jose+jwt » Version: 4.7

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.7
Connect2id » Nimbus Jose+jwt » Version: 4.8

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.8
Connect2id » Nimbus Jose+jwt » Version: 4.9

cpe:2.3:a:connect2id:nimbus_jose+jwt:4.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-12974

Products

Pricing

Contact Us