Jose Php Project

jose-php_project

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Jose Php

jose-php

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-5430 1Jose Php Project 1Jose Php May 6, 2026 Sep 3, 2016 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 The RSA 1.5 algorithm implementation in the JOSE_JWE class in JWE.php in jose-php before 2.2.1 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Mill...Show more The RSA 1.5 algorithm implementation in the JOSE_JWE class in JWE.php in jose-php before 2.2.1 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack (MMA).Show less
CVE-2016-5429 1Jose Php Project 1Jose Php May 6, 2026 Sep 3, 2016 N/A· v4 3.7 LOW· v3 4.3 MEDIUM· v2 jose-php before 2.2.1 does not use constant-time operations for HMAC comparison, which makes it easier for remote attackers to obtain sensitive information via a timing attack, related to JWE.php and JWS.php.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2016-5430

1Jose Php Project

1Jose Php

May 6, 2026

Sep 3, 2016

N/A· v4

5.3 MEDIUM· v3

5.0 MEDIUM· v2

The RSA 1.5 algorithm implementation in the JOSE_JWE class in JWE.php in jose-php before 2.2.1 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Mill...Show more

CVE-2016-5429

1Jose Php Project

1Jose Php

May 6, 2026

Sep 3, 2016

N/A· v4

3.7 LOW· v3

4.3 MEDIUM· v2

jose-php before 2.2.1 does not use constant-time operations for HMAC comparison, which makes it easier for remote attackers to obtain sensitive information via a timing attack, related to JWE.php and JWS.php.