Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A Padding Oracle exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET). Under an MITM condition within the OSCI infrastructure, an attacker needs to send crafted protocol messages to analyse the CBC mode padding in order to decrypt the transport encryption.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OSCI Transport Library OSCI-Transport 加密问题漏洞
Vulnerability Description
OSCI Transport Library（Java）是德国电子政务的一个强制性传输协议的Java库，OSCI Transport Library（.NET）是它的.NET版本。OSCI-Transport是其中的一个基于XML的传输协议。 OSCI Transport Library 1.6.1 (Java) 版本和OSCI Transport Library 1.6 (.NET)版本中的OSCI-Transport 1.2版本中存在加密问题漏洞。攻击者可通过发送特制的协议文件利用该漏洞解密传输加密算
CVSS Information
N/A
Vulnerability Type
N/A