Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.0

jwcrypto: RSA decryption data can be intercepted by attackers

CVE-2016-6298 · published 10 years ago
Summary

A weakness in the RSA decryption process in jwcrypto makes it possible for malicious users to intercept sensitive information. This could allow them to access confidential data that was meant to be secure. To protect your data, update to the latest version of jwcrypto version 0.3.2 or later.

What to do
  • Update jwcrypto project contributors jwcrypto to version 0.3.2.
  • Update latchset jwcrypto to version 0.3.2 or later.
Affected software
Ecosystem VendorProductAffected versions
pip jwcrypto project contributors jwcrypto < 0.3.2
Fix: upgrade to 0.3.2
– latchset jwcrypto < 0.3.2
cpe:2.3:a:latchset:jwcrypto:*:*:*:*:*:*:*:*
Original advisory text
The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain clear...
The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack (MMA).
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.0 Medium
Exploitation
2% chance of attack within 30 days
Type
CWE-200Information Exposure
Timeline
Published1 Sep 2016
Updated29 Oct 2026
First seen6 Mar 2026
Sources
GHSA-wg33-x934-3ghh · GHSA
CVE-2016-6298 · NVD
Track software like this
Free during beta