NVD

Id
81880  
Name
CVE-2016-8212  
Description
An issue was discovered in EMC RSA BSAFE Crypto-J versions prior to 6.2.2. There is an Improper OCSP Validation Vulnerability. OCSP responses have two time values: thisUpdate and nextUpdate. These specify a validity period; however, both values are optional. Crypto-J treats the lack of a nextUpdate as indicating that the OCSP response is valid indefinitely instead of restricting its validity for a brief period surrounding the thisUpdate time. This vulnerability is similar to the issue described in CVE-2015-4748.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-03-18  
Published
2017-02-03  
Modified Date
2017-03-14  
Seq
2016-8212  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
405485 81880 CVE-2016-5117 http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/ntpd/constraint.c.diff?r1=1.27&r2=1.28  View
405486 81880 CVE-2016-5117 http://www.openntpd.org/txt/release-6.0p1.txt  View
405487 81880 CVE-2016-5117 [oss-security] 20160523 CVE request: OpenNTPD not verifying CN during HTTPS constraints request  View
405488 81880 CVE-2016-5117 [oss-security] 20160529 Re: CVE request: OpenNTPD not verifying CN during HTTPS constraints request  View

Related JVN