Описание
BCryptPasswordEncoder.matches(CharSequence,String) will incorrectly return true for passwords larger than 72 characters as long as the first 72 characters are the same.
EPSS
Процентиль: 45%
0.00588
Низкий
7.4 High
CVSS3
Дефекты
CWE-287
Связанные уязвимости
CVSS3: 7.4
redhat
больше 1 года назад
BCryptPasswordEncoder.matches(CharSequence,String) will incorrectly return true for passwords larger than 72 characters as long as the first 72 characters are the same.
CVSS3: 7.4
debian
больше 1 года назад
BCryptPasswordEncoder.matches(CharSequence,String)will incorrectly ret ...
CVSS3: 7.4
github
больше 1 года назад
Spring Security Does Not Enforce Password Length
EPSS
Процентиль: 45%
0.00588
Низкий
7.4 High
CVSS3
Дефекты
CWE-287