PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›CVE-2017-10356

CVE-2017-10356

OpenJDK: weak protection of key stores against brute forcing (Security, 8181692)

Loading…

Severity

Moderate

Red Hat Product Security

6.2

CVSS 3.0

Review impact separately from score.

Published · October 17, 2017

Updated · June 28, 2026

Description

It was discovered that the Security component of OpenJDK generated weak password-based encryption keys used to protect private keys stored in key stores. This made it easier to perform password guessing attacks to decrypt stored keys if an attacker could gain access to a key store.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 6.2
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-327 · Use of a Broken or Risky Cryptographic Algorithm