Описание
BCryptPasswordEncoder.matches(CharSequence,String) will incorrectly return true for passwords larger than 72 characters as long as the first 72 characters are the same.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libspring-security-2.0-java | removed | package |
EPSS
Процентиль: 27%
0.00093
Низкий
Связанные уязвимости
CVSS3: 7.4
redhat
9 месяцев назад
BCryptPasswordEncoder.matches(CharSequence,String) will incorrectly return true for passwords larger than 72 characters as long as the first 72 characters are the same.
CVSS3: 7.4
nvd
9 месяцев назад
BCryptPasswordEncoder.matches(CharSequence,String) will incorrectly return true for passwords larger than 72 characters as long as the first 72 characters are the same.
EPSS
Процентиль: 27%
0.00093
Низкий