PT-2023-33039 · Jose4J · Jose4J

Published 2023-04-27 · Updated 2023-04-27

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions jose4j (affected versions not specified)

Description The issue in jose4j allows for chosen ciphertext attacks, enabling the decryption of RSA1 5 or RSA OAEP encrypted ciphertexts. This could potentially allow an attacker to sign with affected keys. The problem arises from distinguishable behavior in the decryption process when encountering invalid or incorrectly sized encrypted keys. A correct implementation should not exhibit such behavior, and ciphertexts with mismatched algorithms in the header and key should be rejected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

GHSA-JGVC-JFGH-RJVV

Affected Products

Jose4J

References · 6

• https://osv.dev/vulnerability/GHSA-jgvc-jfgh-rjvv · Vendor Advisory
• https://github.com/google/security-research · Note
• https://github.com/google/security-research/security/advisories/GHSA-jgvc-jfgh-rjvv · Note
• https://bitbucket.org/b_c/jose4j/commits/63b86581e7bfcc2d9d04ee15caea4b5bfb911f59 · Note
• https://bitbucket.org/b_c/jose4j/commits/14e62a8dee9decb4ff6e0625aedc5724601bfdb6 · Note
• https://bitbucket.org/b_c/jose4j/commits/tag/jose4j-0.9.3 · Note