Vulnerability & Exploit Database

Back to search

JRE HMAC Digest Flaw

Severity CVSS Published Added Modified
5 (AV:N/AC:L/Au:N/C:N/I:P/A:N) November 05, 2009 December 18, 2009 September 13, 2018

Available Exploits 

Description

The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 are vulnerable to a forgery of HMAC-based digital signatures. This could potentially allows remote attacker to spoof signatures and possibly bypass authentication.

Scan For This Vulnerability

Use our top-rated tool to discover, prioritize, and remediate your vulnerabilities

 Free InsightVM Trial

References

Solution

jre-upgrade-latest

Related Vulnerabilities