NetSight
IP …
critical9.8

CVE-2019-17195

Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential informa…

Impact

Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.

Affected products

VendorProductAffected versions
Connect2idNimbus Jose\+Jwt
before 7.9
ApacheHadoop
Version 3.2.1
OracleCommunications Cloud Native Core Security Edge Protection Proxy
Version 1.7.0
OracleCommunications Pricing Design Center
Version 12.0.0.3.0
OracleData Integrator
Version 12.2.1.4.0
OracleEnterprise Manager Base Platform
Version 13.4.0.0
OracleHealthcare Data Repository
Version 8.1.0
OracleInsurance Policy Administration
from 11.0 through 11.3.1
OracleJd Edwards Enterpriseone Orchestrator
through 9.2.5.3
OracleJd Edwards Enterpriseone Tools
through 9.2.5.3
OraclePeoplesoft Enterprise Peopletools
Versions 8.58, 8.59
OraclePolicy Automation
from 12.2.0 through 12.2.22

Weakness classification

CWE-755

References