CVE:CVE-2020-28052
CNNVD:CNNVD-202012-1340
Bouncy Castle BC是Bouncy Castle组织的一个用于C＃和Java应用程序的加密库。
Bouncy Castle BC 中存在安全漏洞。该漏洞源于检查密码时比较了不正确的数据。
solution:Upgrade bouncycastle legion-of-the-bouncy-castle-java-crytography-api to a higher version than 1.65,1.66,and avoid the version 1.65,1.66; Upgrade apache karaf to a higher version than 4.3.2,and avoid the version 4.3.2; Upgrade oracle banking_corporate_lending_process_management to a higher version than 14.2.0,14.3.0,14.5.0,and avoid the version 14.2.0,14.3.0,14.5.0; Upgrade oracle banking_credit_facilities_process_management to a higher version than 14.2.0,14.3.0,14.5.0,and avoid the version 14.2.0,14.3.0,14.5.0; Upgrade oracle banking_extensibility_workbench to a higher version than 14.2.0,14.3.0,14.5.0,and avoid the version 14.2.0,14.3.0,14.5.0; Upgrade oracle banking_supply_chain_finance to a higher version than 14.2.0,14.3.0,14.5.0,and avoid the version 14.2.0,14.3.0,14.5.0; Upgrade oracle banking_virtual_account_management to a higher version than 14.2.0,14.3.0,14.5.0,and avoid the version 14.2.0,14.3.0,14.5.0; Upgrade oracle blockchain_platform to a higher version than 21.1.2,and avoid the version (,21.1.2); Upgrade oracle commerce_guided_search to a higher version than 11.3.2,and avoid the version 11.3.2; Upgrade oracle communications_application_session_controller to a higher version than 3.9m0p3,and avoid the version 3.9m0p3; Upgrade oracle communications_cloud_native_core_network_slice_selection_function to a higher version than 1.2.1,and avoid the version 1.2.1; Upgrade oracle communications_convergence to a higher version than 3.0.2.2.0,and avoid the version 3.0.2.2.0; Upgrade oracle communications_pricing_design_center to a higher version than 12.0.0.3.0,and avoid the version 12.0.0.3.0; Upgrade oracle communications_session_report_manager to a higher version than 8.2.4.0,and avoid the version [8.0.0,8.2.4.0]; Upgrade oracle communications_session_route_manager to a higher version than 8.2.4,and avoid the version [8.2.0,8.2.4]; Upgrade oracle jd_edwards_enterpriseone_tools to a higher version than 9.2.5.3,and avoid the version (,9.2.5.3]; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.56,8.57,8.58,and avoid the version 8.56,8.57,8.58; Upgrade oracle utilities_framework to a higher version than 4.3.0.6.0,4.4.0.0.0,4.4.0.2.0,4.4.0.3.0,and avoid the version 4.3.0.6.0,4.4.0.0.0,4.4.0.2.0,4.4.0.3.0; Upgrade oracle webcenter_portal to a higher version than 11.1.1.9.0,12.2.1.3.0,12.2.1.4.0,and avoid the version 11.1.1.9.0,12.2.1.3.0,12.2.1.4.0; Upgrade oracle communications_messaging_server to a higher version than 8.0.2,8.1,and avoid the version 8.0.2,8.1