BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable application. This vulnerability is referred to as "ROBOT."
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
bouncycastle legion-of-the-bouncy-castle-java-crytography-api |
Vulmon