CVE-2017-12973
- Source
- https://cve.org/CVERecord?id=CVE-2017-12973
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-12973.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2017-12973
- Aliases
- Published
- 2017-08-20T16:29:00.283Z
- Modified
- 2026-07-08T12:06:17.918246Z
- Severity
-
- 3.1 (Low) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an invalid HMAC in authenticated AES-CBC decryption, which allows attackers to conduct a padding oracle attack.
- Database specific
{ "unresolved_ranges": [ { "source": "CPE_STRING", "cpes": [ "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.0:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.10:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.11:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.12:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.3:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.4:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.5:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.6:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.7:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.8:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.9.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:1.9:*:*:*:*:*:*:*" ], "vendor_product": "connect2id:nimbus_jose+jwt", "extracted_events": [ { "introduced": "1.0" }, { "last_affected": "1.0" }, { "introduced": "1.1" }, { "last_affected": "1.1" }, { "introduced": "1.2" }, { "last_affected": "1.2" }, { "introduced": "1.3" }, { "last_affected": "1.3" }, { "introduced": "1.4" }, { "last_affected": "1.4" }, { "introduced": "1.5" }, { "last_affected": "1.5" }, { "introduced": "1.6" }, { "last_affected": "1.6" }, { "introduced": "1.7" }, { "last_affected": "1.7" }, { "introduced": "1.8" }, { "last_affected": "1.8" }, { "introduced": "1.9" }, { "last_affected": "1.9" }, { "introduced": "1.9.1" }, { "last_affected": "1.9.1" }, { "introduced": "1.10" }, { "last_affected": "1.10" }, { "introduced": "1.11" }, { "last_affected": "1.11" }, { "introduced": "1.12" }, { "last_affected": "1.12" } ] } ] }- References
Affected packages
Git / bitbucket.org/connect2id/nimbus-jose-jwt
Affected ranges
- Type
- GIT
- Repo
- https://bitbucket.org/connect2id/nimbus-jose-jwt
- Events
-
Introducedf46fe5204828a77b7a7c34977de9284e0da26085Last affectedfb7850e081d2f04b889dec3e1d18f5bbc45c7f23Fixed6a29f10f723f406eb25555f55842c59a43a38912
- Database specific
{ "cpe": [ "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.0:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.1.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.3:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.4:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.5:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.6:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.7:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.8:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.9:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.10:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.10.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.11.0:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.12.0:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.13.0:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.13.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.14:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.15:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.15.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.15.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.16:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.17:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.17.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.17.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.18:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.18.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.18.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.19:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.19.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.20:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.21:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.22:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.22.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.23:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.24:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.25:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.26:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:2.26.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.0:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.1.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.1.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.2.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.2.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.3:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.4:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.5:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.6:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.7:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.8:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.8.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.8.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.9:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.9.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.9.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:3.10:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.0:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.1.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.3:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.3.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.4:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.5:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.6:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.7:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.8:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.9:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.10:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.11:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.11.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.11.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.12:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.13:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.13.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.14:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.15:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.15.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.16:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.16.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.16.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.17:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.18:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.19:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.20:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.21:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.22:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.23:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.24:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.25:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.26:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.26.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.27:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.27.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.28:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.29:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.30:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.31:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.31.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.32:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.33:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.34:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.34.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.34.2:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.35:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.36.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.37:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.37.1:*:*:*:*:*:*:*", "cpe:2.3:a:connect2id:nimbus_jose\\+jwt:4.38:*:*:*:*:*:*:*" ], "source": [ "CPE_STRING", "REFERENCES" ], "extracted_events": [ { "introduced": "2.0" }, { "last_affected": "2.0" }, { "introduced": "2.0.1" }, { "last_affected": "2.0.1" }, { "introduced": "2.1" }, { "last_affected": "2.1" }, { "introduced": "2.1.1" }, { "last_affected": "2.1.1" }, { "introduced": "2.2" }, { "last_affected": "2.2" }, { "introduced": "2.3" }, { "last_affected": "2.3" }, { "introduced": "2.4" }, { "last_affected": "2.4" }, { "introduced": "2.5" }, { "last_affected": "2.5" }, { "introduced": "2.6" }, { "last_affected": "2.6" }, { "introduced": "2.7" }, { "last_affected": "2.7" }, { "introduced": "2.8" }, { "last_affected": "2.8" }, { "introduced": "2.9" }, { "last_affected": "2.9" }, { "introduced": "2.10" }, { "last_affected": "2.10" }, { "introduced": "2.10.1" }, { "last_affected": "2.10.1" }, { "introduced": "2.11.0" }, { "last_affected": "2.11.0" }, { "introduced": "2.12.0" }, { "last_affected": "2.12.0" }, { "introduced": "2.13.0" }, { "last_affected": "2.13.0" }, { "introduced": "2.13.1" }, { "last_affected": "2.13.1" }, { "introduced": "2.14" }, { "last_affected": "2.14" }, { "introduced": "2.15" }, { "last_affected": "2.15" }, { "introduced": "2.15.1" }, { "last_affected": "2.15.1" }, { "introduced": "2.15.2" }, { "last_affected": "2.15.2" }, { "introduced": "2.16" }, { "last_affected": "2.16" }, { "introduced": "2.17" }, { "last_affected": "2.17" }, { "introduced": "2.17.1" }, { "last_affected": "2.17.1" }, { "introduced": "2.17.2" }, { "last_affected": "2.17.2" }, { "introduced": "2.18" }, { "last_affected": "2.18" }, { "introduced": "2.18.1" }, { "last_affected": "2.18.1" }, { "introduced": "2.18.2" }, { "last_affected": "2.18.2" }, { "introduced": "2.19" }, { "last_affected": "2.19" }, { "introduced": "2.19.1" }, { "last_affected": "2.19.1" }, { "introduced": "2.20" }, { "last_affected": "2.20" }, { "introduced": "2.21" }, { "last_affected": "2.21" }, { "introduced": "2.22" }, { "last_affected": "2.22" }, { "introduced": "2.22.1" }, { "last_affected": "2.22.1" }, { "introduced": "2.23" }, { "last_affected": "2.23" }, { "introduced": "2.24" }, { "last_affected": "2.24" }, { "introduced": "2.25" }, { "last_affected": "2.25" }, { "introduced": "2.26" }, { "last_affected": "2.26" }, { "introduced": "2.26.1" }, { "last_affected": "2.26.1" }, { "introduced": "3.0" }, { "last_affected": "3.0" }, { "introduced": "3.1" }, { "last_affected": "3.1" }, { "introduced": "3.1.1" }, { "last_affected": "3.1.1" }, { "introduced": "3.1.2" }, { "last_affected": "3.1.2" }, { "introduced": "3.2" }, { "last_affected": "3.2" }, { "introduced": "3.2.1" }, { "last_affected": "3.2.1" }, { "introduced": "3.2.2" }, { "last_affected": "3.2.2" }, { "introduced": "3.3" }, { "last_affected": "3.3" }, { "introduced": "3.4" }, { "last_affected": "3.4" }, { "introduced": "3.5" }, { "last_affected": "3.5" }, { "introduced": "3.6" }, { "last_affected": "3.6" }, { "introduced": "3.7" }, { "last_affected": "3.7" }, { "introduced": "3.8" }, { "last_affected": "3.8" }, { "introduced": "3.8.1" }, { "last_affected": "3.8.1" }, { "introduced": "3.8.2" }, { "last_affected": "3.8.2" }, { "introduced": "3.9" }, { "last_affected": "3.9" }, { "introduced": "3.9.1" }, { "last_affected": "3.9.1" }, { "introduced": "3.9.2" }, { "last_affected": "3.9.2" }, { "introduced": "3.10" }, { "last_affected": "3.10" }, { "introduced": "4.0" }, { "last_affected": "4.0" }, { "introduced": "4.0.1" }, { "last_affected": "4.0.1" }, { "introduced": "4.1" }, { "last_affected": "4.1" }, { "introduced": "4.1.1" }, { "last_affected": "4.1.1" }, { "introduced": "4.2" }, { "last_affected": "4.2" }, { "introduced": "4.3" }, { "last_affected": "4.3" }, { "introduced": "4.3.1" }, { "last_affected": "4.3.1" }, { "introduced": "4.4" }, { "last_affected": "4.4" }, { "introduced": "4.5" }, { "last_affected": "4.5" }, { "introduced": "4.6" }, { "last_affected": "4.6" }, { "introduced": "4.7" }, { "last_affected": "4.7" }, { "introduced": "4.8" }, { "last_affected": "4.8" }, { "introduced": "4.9" }, { "last_affected": "4.9" }, { "introduced": "4.10" }, { "last_affected": "4.10" }, { "introduced": "4.11" }, { "last_affected": "4.11" }, { "introduced": "4.11.1" }, { "last_affected": "4.11.1" }, { "introduced": "4.11.2" }, { "last_affected": "4.11.2" }, { "introduced": "4.12" }, { "last_affected": "4.12" }, { "introduced": "4.13" }, { "last_affected": "4.13" }, { "introduced": "4.13.1" }, { "last_affected": "4.13.1" }, { "introduced": "4.14" }, { "last_affected": "4.14" }, { "introduced": "4.15" }, { "last_affected": "4.15" }, { "introduced": "4.15.1" }, { "last_affected": "4.15.1" }, { "introduced": "4.16" }, { "last_affected": "4.16" }, { "introduced": "4.16.1" }, { "last_affected": "4.16.1" }, { "introduced": "4.16.2" }, { "last_affected": "4.16.2" }, { "introduced": "4.17" }, { "last_affected": "4.17" }, { "introduced": "4.18" }, { "last_affected": "4.18" }, { "introduced": "4.19" }, { "last_affected": "4.19" }, { "introduced": "4.20" }, { "last_affected": "4.20" }, { "introduced": "4.21" }, { "last_affected": "4.21" }, { "introduced": "4.22" }, { "last_affected": "4.22" }, { "introduced": "4.23" }, { "last_affected": "4.23" }, { "introduced": "4.24" }, { "last_affected": "4.24" }, { "introduced": "4.25" }, { "last_affected": "4.25" }, { "introduced": "4.26" }, { "last_affected": "4.26" }, { "introduced": "4.26.1" }, { "last_affected": "4.26.1" }, { "introduced": "4.27" }, { "last_affected": "4.27" }, { "introduced": "4.27.1" }, { "last_affected": "4.27.1" }, { "introduced": "4.28" }, { "last_affected": "4.28" }, { "introduced": "4.29" }, { "last_affected": "4.29" }, { "introduced": "4.30" }, { "last_affected": "4.30" }, { "introduced": "4.31" }, { "last_affected": "4.31" }, { "introduced": "4.31.1" }, { "last_affected": "4.31.1" }, { "introduced": "4.32" }, { "last_affected": "4.32" }, { "introduced": "4.33" }, { "last_affected": "4.33" }, { "introduced": "4.34" }, { "last_affected": "4.34" }, { "introduced": "4.34.1" }, { "last_affected": "4.34.1" }, { "introduced": "4.34.2" }, { "last_affected": "4.34.2" }, { "introduced": "4.35" }, { "last_affected": "4.35" }, { "introduced": "4.36.1" }, { "last_affected": "4.36.1" }, { "introduced": "4.37" }, { "last_affected": "4.37" }, { "introduced": "4.37.1" }, { "last_affected": "4.37.1" }, { "introduced": "4.38" }, { "last_affected": "4.38" } ] }
Affected versions
2.*
2.0
2.0.1
2.1
2.1.1
2.10
2.10.1
2.11.0
2.12.0
2.13.0
2.13.1
2.14
2.14.0
2.15
2.15.0
2.15.1
2.15.2
2.16
2.17
2.17.1
2.17.2
2.18
2.18.1
2.18.2
2.19
2.19.1
2.2
2.20
2.21
2.22
2.22.1
2.23
2.24
2.25
2.26
2.26.1
2.3
2.4
2.5
2.6
2.7
2.8
2.9
3.*
3.0
3.1
3.1.1
3.1.2
3.10
3.2
3.2.1
3.2.2
3.3
3.4
3.5
3.6
3.7
3.8
3.8.1
3.8.2
3.9
3.9.1
3.9.2
4.*
4.0
4.0-rc1
4.0-rc2
4.0-rc3
4.0-rc4
4.0.1
4.1
4.1.1
4.10
4.11
4.11.1
4.11.2
4.12
4.13
4.13.1
4.14
4.15
4.15.1
4.16
4.16.1
4.16.2
4.17
4.18
4.19
4.2
4.20
4.21
4.22
4.23
4.24
4.25
4.26
4.26.1
4.27
4.27.1
4.28
4.29
4.3
4.3.1
4.30
4.31
4.31.1
4.32
4.33
4.34
4.34.1
4.34.2
4.35
4.36
4.36.1
4.37
4.37.1
4.38
4.4
4.5
4.6
4.7
4.8
4.9
Database specific
vanir_signatures
[
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"36435077182769648824144539200763482764",
"221225405666008085863157926433643063529",
"248275944443145673308968769694312607101",
"320447986941090818350865767914465061256",
"257738106142193723590480276808990837124",
"190253527059679348300378316158431539755",
"15674162120766882722956143379512560123"
]
},
"signature_version": "v1",
"source": "https://bitbucket.org/connect2id/nimbus-jose-jwt@6a29f10f723f406eb25555f55842c59a43a38912",
"signature_type": "Line",
"target": {
"file": "src/test/java/com/nimbusds/jose/crypto/AESCBCTest.java"
},
"id": "CVE-2017-12973-83ba7880",
"deprecated": false
},
{
"digest": {
"length": 831.0,
"function_hash": "30873108536757750440668463301508600213"
},
"signature_version": "v1",
"source": "https://bitbucket.org/connect2id/nimbus-jose-jwt@6a29f10f723f406eb25555f55842c59a43a38912",
"signature_type": "Function",
"target": {
"function": "decryptAuthenticated",
"file": "src/main/java/com/nimbusds/jose/crypto/AESCBC.java"
},
"id": "CVE-2017-12973-8fddb8aa",
"deprecated": false
},
{
"digest": {
"length": 1109.0,
"function_hash": "236213427891800737982253186864940241476"
},
"signature_version": "v1",
"source": "https://bitbucket.org/connect2id/nimbus-jose-jwt@6a29f10f723f406eb25555f55842c59a43a38912",
"signature_type": "Function",
"target": {
"function": "decryptWithConcatKDF",
"file": "src/main/java/com/nimbusds/jose/crypto/AESCBC.java"
},
"id": "CVE-2017-12973-bc84ece8",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"35018700141178900754895011799387586413",
"23210894372056268032297871442564513847",
"102375337653080225852646387558193098844",
"143802061001915409894760621002970574355",
"186448877813480750470093697857407943500",
"156186524451473883298028680057499734344",
"314799720785399631741077152447637097045",
"332890821269199314396999039272601680450",
"115380475547764836096130112939018077308",
"112515943459359502487605947776116967647",
"172612522757869334105109761993727279884",
"142039361351170592512047791599796892391",
"95946088047134294800092685466486312825",
"60152373669270615370440034498579187985",
"280492070757543771453027851327819029791",
"221403414440494563007614824018889324485",
"1894466923688934958026594011629943405",
"59741151086996169066197142383462513440",
"233078262287712076948859519221598030403",
"30861009376071704210913003331615204446",
"332947917171967944776808918114577282512",
"18136453160694785944270925616851898192",
"40475491843953653643162699661677929363",
"151246875674351598710595633477384636928",
"322974018495388437913836007418169443313",
"76069166384751547997871421196598149788",
"44437097317994459278761123799175645327",
"277190829670493988396513370163311149761",
"94546924572782216804672716981269134975",
"82318690769468239319429518385763591879"
]
},
"signature_version": "v1",
"source": "https://bitbucket.org/connect2id/nimbus-jose-jwt@6a29f10f723f406eb25555f55842c59a43a38912",
"signature_type": "Line",
"target": {
"file": "src/main/java/com/nimbusds/jose/crypto/AESCBC.java"
},
"id": "CVE-2017-12973-f4fd57ce",
"deprecated": false
}
]
vanir_signatures_modified
"2026-07-08T12:06:17Z"
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-12973.json"