CVE-2017-16007

{"containers": {"cna": {"affected": [{"product": "node-jose node module", "vendor": "HackerOne", "versions": [{"status": "affected", "version": "<0.9.3"}]}], "datePublic": "2018-04-26T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for current web browsers and node.js-based servers. node-jose earlier than version 0.9.3 is vulnerable to an invalid curve attack. This allows an attacker to recover the private secret key when JWE with Key Agreement with Elliptic Curve Diffie-Hellman Ephemeral Static (ECDH-ES) is used."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-200", "description": "Information Disclosure (CWE-200)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2018-06-04T18:57:01.000Z", "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "shortName": "hackerone"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://gist.github.com/asanso/fa25685348051ef6a28d49aa0f27a4ae"}, {"tags": ["x_refsource_MISC"], "url": "https://nodesecurity.io/advisories/324"}, {"tags": ["x_refsource_MISC"], "url": "http://blog.intothesymmetry.com/2017/03/critical-vulnerability-in-json-web.html"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/cisco/node-jose"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "support@hackerone.com", "DATE_PUBLIC": "2018-04-26T00:00:00", "ID": "CVE-2017-16007", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "node-jose node module", "version": {"version_data": [{"version_value": "<0.9.3"}]}}]}, "vendor_name": "HackerOne"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for current web browsers and node.js-based servers. node-jose earlier than version 0.9.3 is vulnerable to an invalid curve attack. This allows an attacker to recover the private secret key when JWE with Key Agreement with Elliptic Curve Diffie-Hellman Ephemeral Static (ECDH-ES) is used."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Information Disclosure (CWE-200)"}]}]}, "references": {"reference_data": [{"name": "https://gist.github.com/asanso/fa25685348051ef6a28d49aa0f27a4ae", "refsource": "MISC", "url": "https://gist.github.com/asanso/fa25685348051ef6a28d49aa0f27a4ae"}, {"name": "https://nodesecurity.io/advisories/324", "refsource": "MISC", "url": "https://nodesecurity.io/advisories/324"}, {"name": "http://blog.intothesymmetry.com/2017/03/critical-vulnerability-in-json-web.html", "refsource": "MISC", "url": "http://blog.intothesymmetry.com/2017/03/critical-vulnerability-in-json-web.html"}, {"name": "https://github.com/cisco/node-jose", "refsource": "MISC", "url": "https://github.com/cisco/node-jose"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T20:13:06.846Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://gist.github.com/asanso/fa25685348051ef6a28d49aa0f27a4ae"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://nodesecurity.io/advisories/324"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://blog.intothesymmetry.com/2017/03/critical-vulnerability-in-json-web.html"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/cisco/node-jose"}]}]}, "cveMetadata": {"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "assignerShortName": "hackerone", "cveId": "CVE-2017-16007", "datePublished": "2018-06-04T19:00:00.000Z", "dateReserved": "2017-10-29T00:00:00.000Z", "dateUpdated": "2024-09-16T18:23:49.490Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "node-jose node module", "vendor": "HackerOne", "versions": [{"status": "affected", "version": "<0.9.3"}]}], "source": "support@hackerone.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:node-jose:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "933B574A-74B7-418B-BA6C-5054E990D969", "versionEndExcluding": "0.9.3", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for current web browsers and node.js-based servers. node-jose earlier than version 0.9.3 is vulnerable to an invalid curve attack. This allows an attacker to recover the private secret key when JWE with Key Agreement with Elliptic Curve Diffie-Hellman Ephemeral Static (ECDH-ES) is used."}, {"lang": "es", "value": "node-jose es una implementaci\u00f3n de JavaScript de JSON Object Signing and Encryption (JOSE) para los navegadores web actuales y los servidores basados en node.js. node-jose en versiones anteriores a la 0.9.3 es vulnerable a un ataque de curva inv\u00e1lida. Esto permite que un atacante recupere la clave privada secreta cuando se emplea JWE con ECDH-ES (Elliptic Curve Diffie-Hellman Ephemeral Static)."}], "id": "CVE-2017-16007", "lastModified": "2026-06-17T01:08:38.037", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 2.2, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-06-04T19:29:00.617", "references": [{"source": "support@hackerone.com", "tags": ["Exploit", "Third Party Advisory"], "url": "http://blog.intothesymmetry.com/2017/03/critical-vulnerability-in-json-web.html"}, {"source": "support@hackerone.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://gist.github.com/asanso/fa25685348051ef6a28d49aa0f27a4ae"}, {"source": "support@hackerone.com", "tags": ["Third Party Advisory"], "url": "https://github.com/cisco/node-jose"}, {"source": "support@hackerone.com", "tags": ["Third Party Advisory"], "url": "https://nodesecurity.io/advisories/324"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "http://blog.intothesymmetry.com/2017/03/critical-vulnerability-in-json-web.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://gist.github.com/asanso/fa25685348051ef6a28d49aa0f27a4ae"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://github.com/cisco/node-jose"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://nodesecurity.io/advisories/324"}], "sourceIdentifier": "support@hackerone.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "support@hackerone.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}