Jose-Php Project Jose-Php
2 CVEs affecting Jose-Php Project Jose-Php. Latest disclosed: 2016-09-03. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-5430 | Medium | 5.3 | 2016-09-03 | The RSA 1.5 algorithm implementation in the JOSE_JWE class in JWE.php in jose-php before 2.2.1 lacks the Random Filling protection mechanism, which makes it ea… |
CVE-2016-5429 | Low | 3.7 | 2016-09-03 | jose-php before 2.2.1 does not use constant-time operations for HMAC comparison, which makes it easier for remote attackers to obtain sensitive information via… |