CVE-2016-6298

The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it…

published September 1, 2016

CVSS
—
EPSS
2%
Percentile
82.7
In the wild
Unconfirmed
What it is

The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack (MMA).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02245 · 82.7th percentile
Published
2016-09-01T23:00Z
EPSS history
Timeline
  • 01 SEP 23:00Z
    The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it…
    cvelistv5