| Package | Affected versions | Patched versions |
|---|---|---|
| com.nimbusds:nimbus-jose-jwt | < 7.9 | 7.9 |
| hadoop | = 3.2.1 | |
| nimbus jose+jwt | < 7.9 | 7.9 |
| communications cloud native core security edge protection proxy | = 1.7.0 | |
| communications pricing design center | = 12.0.0.3.0 | |
| data integrator | = 12.2.1.4.0 | |
| enterprise manager base platform | = 13.4.0.0 | |
| healthcare data repository | = 8.1.0 | |
| insurance policy administration | ≥ 11.0, ≤ 11.3.1 | |
| jd edwards enterpriseone orchestrator | ≤ 9.2.5.3 | |
| jd edwards enterpriseone tools | ≤ 9.2.5.3 | |
| peoplesoft enterprise peopletools | = 8.58= 8.59 | |
| policy automation | ≥ 12.2.0, ≤ 12.2.22 | |
| primavera gateway | = 19.12.0≥ 18.8.0, ≤ 18.8.11 | |
| solaris cluster | = 4.0 | |
| weblogic server | = 12.2.1.3.0= 12.2.1.4.0 |
Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free