CVE-2020-7226 in Vt and Oracle Products
Published on January 24, 2020
CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data.
Products Associated with CVE-2020-7226
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2020-7226 are published in these products:
Exploit Probability
EPSS
3.28%
Percentile
86.93%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.