Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in EMC RSA BSAFE Crypto-J versions prior to 6.2.2. There is an Improper OCSP Validation Vulnerability. OCSP responses have two time values: thisUpdate and nextUpdate. These specify a validity period; however, both values are optional. Crypto-J treats the lack of a nextUpdate as indicating that the OCSP response is valid indefinitely instead of restricting its validity for a brief period surrounding the thisUpdate time. This vulnerability is similar to the issue described in CVE-2015-4748.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
EMC RSA BSAFE Crypto-J 安全漏洞
Vulnerability Description
EMC RSA BSAFE Crypto-J是美国易安信（EMC）公司的一个加密工具包，它可以为开发人员提供向其应用程序添加隐私和身份验证功能的工具。 EMC RSA BSAFE Crypto-J 6.2.2之前的版本存在安全绕过漏洞。攻击者可利用该漏洞绕过安全限制
CVSS Information
N/A
Vulnerability Type
N/A