-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.bouncycastle:bcprov-jdk15on | maven | < 1.48 | 1.48 |
Miggo AIRoot Cause AnalysisThe vulnerability centers on non-constant-time processing of CBC padding and MAC checks. The Openwall analysis explicitly identifies Bouncy Castle's deviation from RFC recommendations (using last-byte-derived padding length rather than zero-length assumption). The TlsBlockCipher.decrypt() method is the logical location for this decryption/padding/MAC validation sequence in Bouncy Castle's TLS implementation. The described vulnerability pattern matches classic TLS CBC padding oracle vulnerabilities where timing differences between padding validation and MAC validation steps are exploitable.