PT-2021-18219 · Unknown · Jose-Browser-Runtime

Morgan Brown · Published 2021-04-16 · Updated 2023-03-21 · CVE-2021-29444

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: jose-browser-runtime versions prior to 3.11.4

Description: The AES CBC HMAC SHA2 Algorithm decryption in jose-browser-runtime has a padding oracle vulnerability. This occurs because a possibly observable difference in timing when a padding error happens while decrypting the ciphertext can be used by an adversary to decrypt data without knowing the decryption key. The adversary can make use of this oracle by issuing on average 128*b calls to the padding oracle, where b is the number of bytes in the ciphertext block.

Recommendations: For versions prior to 3.11.4, upgrade to version 3.11.4 or later. Specifically, users should upgrade to ^3.11.4 to ensure the HMAC tag is verified before performing CBC decryption, thus mitigating the vulnerability.

Fix

Side Channel Attack

Weakness Enumeration

CWE-203

Related Identifiers

CVE-2021-29444

GHSA-94HH-PJJG-RWMR

Affected Products

Jose-Browser-Runtime

References · 6

• https://osv.dev/vulnerability/CVE-2021-29444 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-94hh-pjjg-rwmr · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29444 · Security Note
• https://github.com/panva/jose · Note
• https://github.com/panva/jose/security/advisories/GHSA-94hh-pjjg-rwmr · Note
• https://npmjs.com/package/jose-browser-runtime · Note