VULNERABILITY INTELLIGENCE

CVE-2016-6298

CVSS score5.3 MEDIUM
EPSS probability2.25%
CISA KEVNot currently listed
Published2016-09-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack (MMA).

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references