CVE:CVE-2020-15522
CNNVD:CNNVD-202105-1290
Bouncy Castle BC是Bouncy Castle组织的一个用于C＃和Java应用程序的加密库。
Bouncy Castle BC Java, BC C# .NET, BC-FJA, BC-FNA 存在竞争条件问题漏洞，攻击者可利用该漏洞绕过对数据的访问限制，以获取敏感信息。
solution:Upgrade bouncycastle bc-csharp to a higher version than 1.8.7,and avoid the version (,1.8.7); Upgrade bouncycastle bouncy_castle_fips_.net_api to a higher version than 1.0.1.1,and avoid the version (,1.0.1.1); Upgrade bouncycastle legion-of-the-bouncy-castle-fips-java-api to a higher version than 1.0.1.2,1.0.2.1,and avoid the version (,1.0.1.2),[1.0.2,1.0.2.1); Upgrade bouncycastle the_bouncy_castle_crypto_package_for_java to a higher version than 1.66,and avoid the version (,1.66)