CVE-2018-1000180 in Enterprise Repositoryinfo

Summary

Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fixed in versions BC 1.60 beta 4 and later, BC-FJA 1.0.2 and later.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

05/21/2018

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

IDVulnerabilityCWEExpCouCVE
173509Oracle Enterprise Repository Security information disclosure200Not definedOfficial fixCVE-2018-1000180
153319Oracle Communications Diameter Signaling Router IDIH Visualization risky encryption327Not definedOfficial fixCVE-2018-1000180
138004Oracle Data Integrator Spring risky encryption327Not definedOfficial fixCVE-2018-1000180
137926Oracle Enterprise Manager for Fusion Middleware Apache Commons FileUpload risky encryption327Not definedOfficial fixCVE-2018-1000180
137889Oracle Convergence Bouncy Castle Java risky encryption327Not definedOfficial fixCVE-2018-1000180
133730Oracle Retail Xstore Point of Service Xenvironment information disclosure200Not definedOfficial fixCVE-2018-1000180
133705Oracle PeopleSoft Enterprise PeopleTools Bouncy Castle Java information disclosure200Not definedOfficial fixCVE-2018-1000180
133609Oracle SOA Suite B2B Engine information disclosure200Not definedOfficial fixCVE-2018-1000180
133608Oracle Managed File Transfer MFT Runtime Server information disclosure200Not definedOfficial fixCVE-2018-1000180
133606Oracle API Gateway Bouncy Castle Java information disclosure200Not definedOfficial fixCVE-2018-1000180
133564Oracle Business Transaction Management Bouncy Castle Java information disclosure200Not definedOfficial fixCVE-2018-1000180
133505Oracle Communications Application Session Controller Bouncy Castle Java information disclosure200Not definedOfficial fixCVE-2018-1000180
129678Oracle Retail Convenience/Fuel POS Software Bouncy Castle Java risky encryption327Not definedOfficial fixCVE-2018-1000180
129558Oracle WebLogic Server AntiSamy risky encryption327Not definedOfficial fixCVE-2018-1000180
129557Oracle WebCenter Portal AntiSamy risky encryption327Not definedOfficial fixCVE-2018-1000180
129545Oracle Enterprise Repository OpenSSL risky encryption327Not definedOfficial fixCVE-2018-1000180
129543Oracle Business Process Management Suite OpenSSL risky encryption327Not definedOfficial fixCVE-2018-1000180
129476Oracle Communications WebRTC Session Controller Bouncy Castle Java risky encryption327Not definedOfficial fixCVE-2018-1000180
129473Oracle Communications Converged Application Server Bouncy Castle risky encryption327Not definedOfficial fixCVE-2018-1000180
118951Bouncy Castle BC/BC-FJA RSA Key Pair Generator cryptographic issue310Not definedOfficial fixCVE-2018-1000180

Description

CPE

CWE

CVSS

Exploits

History

Diff

Relate

Threat Intelligence

API JSON

API XML

API CSV

Sources

◂ PreviousOverviewNext ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!