CVEDB API

Vulnerability Details CVE-2020-28052

An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed ones that were different.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.058

EPSS Ranking 90.0%

CVSS Severity

CVSS v3 Score 8.1

CVSS v2 Score 6.8

References

Products affected by CVE-2020-28052

Apache » Karaf » Version: 4.3.2

cpe:2.3:a:apache:karaf:4.3.2
Bouncycastle » Legion-Of-The-Bouncy-Castle-Java-Crytography-Api » Version: 1.65

cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.65
Bouncycastle » Legion-Of-The-Bouncy-Castle-Java-Crytography-Api » Version: 1.66

cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.66
Oracle » Banking Corporate Lending Process Management » Version: 14.2.0

cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.2.0
Oracle » Banking Corporate Lending Process Management » Version: 14.3.0

cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.3.0
Oracle » Banking Corporate Lending Process Management » Version: 14.5.0

cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.5.0
Oracle » Banking Credit Facilities Process Management » Version: 14.2.0

cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.2.0
Oracle » Banking Credit Facilities Process Management » Version: 14.3.0

cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.3.0
Oracle » Banking Credit Facilities Process Management » Version: 14.5.0

cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.5.0
Oracle » Banking Extensibility Workbench » Version: 14.2.0

cpe:2.3:a:oracle:banking_extensibility_workbench:14.2.0
Oracle » Banking Extensibility Workbench » Version: 14.3.0

cpe:2.3:a:oracle:banking_extensibility_workbench:14.3.0
Oracle » Banking Extensibility Workbench » Version: 14.5.0

cpe:2.3:a:oracle:banking_extensibility_workbench:14.5.0
Oracle » Banking Supply Chain Finance » Version: 14.2.0

cpe:2.3:a:oracle:banking_supply_chain_finance:14.2.0
Oracle » Banking Supply Chain Finance » Version: 14.3.0

cpe:2.3:a:oracle:banking_supply_chain_finance:14.3.0
Oracle » Banking Supply Chain Finance » Version: 14.5.0

cpe:2.3:a:oracle:banking_supply_chain_finance:14.5.0
Oracle » Banking Virtual Account Management » Version: 14.2.0

cpe:2.3:a:oracle:banking_virtual_account_management:14.2.0
Oracle » Banking Virtual Account Management » Version: 14.3.0

cpe:2.3:a:oracle:banking_virtual_account_management:14.3.0
Oracle » Banking Virtual Account Management » Version: 14.5.0

cpe:2.3:a:oracle:banking_virtual_account_management:14.5.0
Oracle » Blockchain Platform » Version: N/A

cpe:2.3:a:oracle:blockchain_platform:-
Oracle » Commerce Guided Search » Version: 11.3.2

cpe:2.3:a:oracle:commerce_guided_search:11.3.2
Oracle » Communications Application Session Controller » Version: 3.9m0p3

cpe:2.3:a:oracle:communications_application_session_controller:3.9m0p3
Oracle » Communications Cloud Native Core Network Slice Selection Function » Version: 1.2.1

cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:1.2.1
Oracle » Communications Convergence » Version: 3.0.2.2.0

cpe:2.3:a:oracle:communications_convergence:3.0.2.2.0
Oracle » Communications Pricing Design Center » Version: 12.0.0.3.0

cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.3.0
Oracle » Communications Session Report Manager » Version: 8.0.0

cpe:2.3:a:oracle:communications_session_report_manager:8.0.0
Oracle » Communications Session Report Manager » Version: 8.0.0.0

cpe:2.3:a:oracle:communications_session_report_manager:8.0.0.0
Oracle » Communications Session Report Manager » Version: 8.1.0

cpe:2.3:a:oracle:communications_session_report_manager:8.1.0
Oracle » Communications Session Report Manager » Version: 8.1.1

cpe:2.3:a:oracle:communications_session_report_manager:8.1.1
Oracle » Communications Session Report Manager » Version: 8.2.0

cpe:2.3:a:oracle:communications_session_report_manager:8.2.0
Oracle » Communications Session Report Manager » Version: 8.2.1

cpe:2.3:a:oracle:communications_session_report_manager:8.2.1
Oracle » Communications Session Report Manager » Version: 8.2.2

cpe:2.3:a:oracle:communications_session_report_manager:8.2.2
Oracle » Communications Session Report Manager » Version: 8.2.2.1

cpe:2.3:a:oracle:communications_session_report_manager:8.2.2.1
Oracle » Communications Session Report Manager » Version: 8.2.4.0

cpe:2.3:a:oracle:communications_session_report_manager:8.2.4.0
Oracle » Communications Session Route Manager » Version: 8.2.0

cpe:2.3:a:oracle:communications_session_route_manager:8.2.0
Oracle » Communications Session Route Manager » Version: 8.2.0.0

cpe:2.3:a:oracle:communications_session_route_manager:8.2.0.0
Oracle » Communications Session Route Manager » Version: 8.2.1

cpe:2.3:a:oracle:communications_session_route_manager:8.2.1
Oracle » Communications Session Route Manager » Version: 8.2.2

cpe:2.3:a:oracle:communications_session_route_manager:8.2.2
Oracle » Communications Session Route Manager » Version: 8.2.2.1

cpe:2.3:a:oracle:communications_session_route_manager:8.2.2.1
Oracle » Communications Session Route Manager » Version: 8.2.4

cpe:2.3:a:oracle:communications_session_route_manager:8.2.4
Oracle » Jd Edwards Enterpriseone Tools » Version: N/A

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:-
Oracle » Jd Edwards Enterpriseone Tools » Version: 4.0.1.0

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:4.0.1.0
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.1

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.1
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.1.5

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.1.5
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2.0.0

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.0.0
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2.4.0

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.4.0
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2.4.2

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.4.2
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2.5.0

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.5.0
Oracle » Jd Edwards Enterpriseone Tools » Version: 9.2.5.3

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.5.3
Oracle » Peoplesoft Enterprise Peopletools » Version: 8.56

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56
Oracle » Peoplesoft Enterprise Peopletools » Version: 8.57

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57
Oracle » Peoplesoft Enterprise Peopletools » Version: 8.58

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58
Oracle » Utilities Framework » Version: 4.3.0.6.0

cpe:2.3:a:oracle:utilities_framework:4.3.0.6.0
Oracle » Utilities Framework » Version: 4.4.0.0.0

cpe:2.3:a:oracle:utilities_framework:4.4.0.0.0
Oracle » Utilities Framework » Version: 4.4.0.2.0

cpe:2.3:a:oracle:utilities_framework:4.4.0.2.0
Oracle » Utilities Framework » Version: 4.4.0.3.0

cpe:2.3:a:oracle:utilities_framework:4.4.0.3.0
Oracle » Webcenter Portal » Version: 11.1.1.9.0

cpe:2.3:a:oracle:webcenter_portal:11.1.1.9.0
Oracle » Webcenter Portal » Version: 12.2.1.3.0

cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0
Oracle » Webcenter Portal » Version: 12.2.1.4.0

cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0
Oracle » Communications Messaging Server » Version: 8.0.2

cpe:2.3:o:oracle:communications_messaging_server:8.0.2
Oracle » Communications Messaging Server » Version: 8.1

cpe:2.3:o:oracle:communications_messaging_server:8.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-28052

Products

Pricing

Contact Us