RHSA-2026:12267
Vulnerability from csaf_redhat - Published: 2026-04-30 11:14 - Updated: 2026-05-05 14:02Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update
Severity
Important
Notes
Topic: A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.
This asynchronous patch is a security update for Red Hat JBoss Enterprise Application Platform 7.4.
Security Fix(es):
* bouncycastle: BC-JAVA: private key leakage via non-constant time comparisons (CVE-2026-5598)
A Red Hat Security Bulletin which addresses further details about this flaw is available in the References section.
For more details about the security issue(s), including the impact, a CVSS score, acknowledgements, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA core. A covert timing channel vulnerability, caused by non-constant time comparisons, risks the leakage of private keys in the FrodoKEM implementation. An unauthenticated, remote attacker can potentially exploit this timing discrepancy to gain unauthorized access to sensitive cryptographic information.
7.5 (High)
Vendor Fix
Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2026:12267
Workaround
To mitigate this vulnerability, implement aggressive rate limiting and anomaly detection, specifically looking for unusual, high-frequency cryptographic handshake failures or anomalous traffic patterns targeting endpoints that handle key exchanges in the network logs.
References
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.\n\nThis asynchronous patch is a security update for Red Hat JBoss Enterprise Application Platform 7.4.\n\nSecurity Fix(es):\n\n* bouncycastle: BC-JAVA: private key leakage via non-constant time comparisons (CVE-2026-5598)\n\nA Red Hat Security Bulletin which addresses further details about this flaw is available in the References section.\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgements, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:12267",
"url": "https://access.redhat.com/errata/RHSA-2026:12267"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4",
"url": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index",
"url": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/articles/7137599",
"url": "https://access.redhat.com/articles/7137599"
},
{
"category": "external",
"summary": "2458635",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458635"
},
{
"category": "external",
"summary": "JBEAP-32774",
"url": "https://issues.redhat.com/browse/JBEAP-32774"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_12267.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update",
"tracking": {
"current_release_date": "2026-05-05T14:02:16+00:00",
"generator": {
"date": "2026-05-05T14:02:16+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.9"
}
},
"id": "RHSA-2026:12267",
"initial_release_date": "2026-04-30T11:14:58+00:00",
"revision_history": [
{
"date": "2026-04-30T11:14:58+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-04-30T11:14:58+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-05-05T14:02:16+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server",
"product": {
"name": "Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.4-ELS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss EAP 7.4 ELS for RHEL 8",
"product": {
"name": "Red Hat JBoss EAP 7.4 ELS for RHEL 8",
"product_id": "8Base-JBEAP-7.4-ELS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss EAP 7.4 ELS for RHEL 9",
"product": {
"name": "Red Hat JBoss EAP 7.4 ELS for RHEL 9",
"product_id": "9Base-JBEAP-7.4-ELS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el7eap.src",
"product": {
"name": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el7eap.src",
"product_id": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el7eap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-bouncycastle@1.84.0-1.redhat_00001.1.el7eap?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el8eap.src",
"product": {
"name": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el8eap.src",
"product_id": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el8eap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-bouncycastle@1.84.0-1.redhat_00001.1.el8eap?arch=src"
}
}
},
{
"category": "product_version",
"name": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el9eap.src",
"product": {
"name": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el9eap.src",
"product_id": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el9eap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-bouncycastle@1.84.0-1.redhat_00001.1.el9eap?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"product": {
"name": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"product_id": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-bouncycastle@1.84.0-1.redhat_00001.1.el7eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"product": {
"name": "eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"product_id": "eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-bouncycastle-mail@1.84.0-1.redhat_00001.1.el7eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"product": {
"name": "eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"product_id": "eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-bouncycastle-pg@1.84.0-1.redhat_00001.1.el7eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"product": {
"name": "eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"product_id": "eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-bouncycastle-pkix@1.84.0-1.redhat_00001.1.el7eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"product": {
"name": "eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"product_id": "eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-bouncycastle-prov@1.84.0-1.redhat_00001.1.el7eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"product": {
"name": "eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"product_id": "eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-bouncycastle-util@1.84.0-1.redhat_00001.1.el7eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"product": {
"name": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"product_id": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-bouncycastle@1.84.0-1.redhat_00001.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"product": {
"name": "eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"product_id": "eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-bouncycastle-mail@1.84.0-1.redhat_00001.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"product": {
"name": "eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"product_id": "eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-bouncycastle-pg@1.84.0-1.redhat_00001.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"product": {
"name": "eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"product_id": "eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-bouncycastle-pkix@1.84.0-1.redhat_00001.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"product": {
"name": "eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"product_id": "eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-bouncycastle-prov@1.84.0-1.redhat_00001.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"product": {
"name": "eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"product_id": "eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-bouncycastle-util@1.84.0-1.redhat_00001.1.el8eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"product": {
"name": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"product_id": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-bouncycastle@1.84.0-1.redhat_00001.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"product": {
"name": "eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"product_id": "eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-bouncycastle-mail@1.84.0-1.redhat_00001.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"product": {
"name": "eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"product_id": "eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-bouncycastle-pg@1.84.0-1.redhat_00001.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"product": {
"name": "eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"product_id": "eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-bouncycastle-pkix@1.84.0-1.redhat_00001.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"product": {
"name": "eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"product_id": "eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-bouncycastle-prov@1.84.0-1.redhat_00001.1.el9eap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"product": {
"name": "eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"product_id": "eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/eap7-bouncycastle-util@1.84.0-1.redhat_00001.1.el9eap?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el7eap.noarch"
},
"product_reference": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.4-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el7eap.src"
},
"product_reference": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el7eap.src",
"relates_to_product_reference": "7Server-JBEAP-7.4-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.4-ELS:eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el7eap.noarch"
},
"product_reference": "eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.4-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.4-ELS:eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el7eap.noarch"
},
"product_reference": "eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.4-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.4-ELS:eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el7eap.noarch"
},
"product_reference": "eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.4-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.4-ELS:eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el7eap.noarch"
},
"product_reference": "eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.4-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server",
"product_id": "7Server-JBEAP-7.4-ELS:eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el7eap.noarch"
},
"product_reference": "eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"relates_to_product_reference": "7Server-JBEAP-7.4-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 8",
"product_id": "8Base-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el8eap.noarch"
},
"product_reference": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-7.4-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 8",
"product_id": "8Base-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el8eap.src"
},
"product_reference": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el8eap.src",
"relates_to_product_reference": "8Base-JBEAP-7.4-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 8",
"product_id": "8Base-JBEAP-7.4-ELS:eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el8eap.noarch"
},
"product_reference": "eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-7.4-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 8",
"product_id": "8Base-JBEAP-7.4-ELS:eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el8eap.noarch"
},
"product_reference": "eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-7.4-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 8",
"product_id": "8Base-JBEAP-7.4-ELS:eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el8eap.noarch"
},
"product_reference": "eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-7.4-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 8",
"product_id": "8Base-JBEAP-7.4-ELS:eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el8eap.noarch"
},
"product_reference": "eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-7.4-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 8",
"product_id": "8Base-JBEAP-7.4-ELS:eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el8eap.noarch"
},
"product_reference": "eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"relates_to_product_reference": "8Base-JBEAP-7.4-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 9",
"product_id": "9Base-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el9eap.noarch"
},
"product_reference": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-7.4-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 9",
"product_id": "9Base-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el9eap.src"
},
"product_reference": "eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el9eap.src",
"relates_to_product_reference": "9Base-JBEAP-7.4-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 9",
"product_id": "9Base-JBEAP-7.4-ELS:eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el9eap.noarch"
},
"product_reference": "eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-7.4-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 9",
"product_id": "9Base-JBEAP-7.4-ELS:eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el9eap.noarch"
},
"product_reference": "eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-7.4-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 9",
"product_id": "9Base-JBEAP-7.4-ELS:eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el9eap.noarch"
},
"product_reference": "eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-7.4-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 9",
"product_id": "9Base-JBEAP-7.4-ELS:eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el9eap.noarch"
},
"product_reference": "eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-7.4-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 7.4 ELS for RHEL 9",
"product_id": "9Base-JBEAP-7.4-ELS:eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el9eap.noarch"
},
"product_reference": "eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"relates_to_product_reference": "9Base-JBEAP-7.4-ELS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-5598",
"cwe": {
"id": "CWE-385",
"name": "Covert Timing Channel"
},
"discovery_date": "2026-04-15T10:01:04.531185+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2458635"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA core. A covert timing channel vulnerability, caused by non-constant time comparisons, risks the leakage of private keys in the FrodoKEM implementation. An unauthenticated, remote attacker can potentially exploit this timing discrepancy to gain unauthorized access to sensitive cryptographic information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bouncycastle: BC-JAVA: private key leakage via non-constant time comparisons",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an unauthenticated attacker needs to send highly specific, malformed ciphertexts to the target server. These payloads are used to interact with the private key of the server in a way that the vulnerable, non-constant time code paths are triggered during the verification step. An attack typically requires sending a large volume of these requests to perform statistical analysis on the resulting timing variations, increasing its complexity.\nThe primary security impact of this vulnerability is the potential leakage of private keys associated with the FrodoKEM implementation. This can compromise encrypted communications or authentication mechanisms.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el7eap.src",
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el8eap.src",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el9eap.src",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el9eap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5598"
},
{
"category": "external",
"summary": "RHBZ#2458635",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458635"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5598",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5598"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5598",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5598"
},
{
"category": "external",
"summary": "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905998",
"url": "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905998"
}
],
"release_date": "2026-04-15T09:05:56.277000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-30T11:14:58+00:00",
"details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el7eap.src",
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el8eap.src",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el9eap.src",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el9eap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:12267"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, implement aggressive rate limiting and anomaly detection, specifically looking for unusual, high-frequency cryptographic handshake failures or anomalous traffic patterns targeting endpoints that handle key exchanges in the network logs.",
"product_ids": [
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el7eap.src",
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el8eap.src",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el9eap.src",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el9eap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el7eap.src",
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"7Server-JBEAP-7.4-ELS:eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el7eap.noarch",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el8eap.src",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"8Base-JBEAP-7.4-ELS:eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el8eap.noarch",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-0:1.84.0-1.redhat_00001.1.el9eap.src",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-mail-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-pg-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-pkix-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-prov-0:1.84.0-1.redhat_00001.1.el9eap.noarch",
"9Base-JBEAP-7.4-ELS:eap7-bouncycastle-util-0:1.84.0-1.redhat_00001.1.el9eap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "bouncycastle: BC-JAVA: private key leakage via non-constant time comparisons"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…