Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant memory allocation and processing time during decompression.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service due to jose4j (CVE-2024-29371) https://tinyurl.com/245q82br
Post summary
IBM WebSphere Application Server and Liberty are vulnerable to a denial‑of‑service via jose4j (CVE‑2024‑29371). No PoC, exploit, or patch details are provided.
PH69729:IBM WebSphere Application Server Liberty is affected by a denial of service due to jose4j (CVE-2024-29371 CVSS 7.5) https://tinyurl.com/2xq9285y
Post summary
IBM WebSphere Application Server Liberty is vulnerable to a denial-of-service via jose4j (CVE-2024-29371) with a CVSS score of 7.5; no PoC, exploit, or patch details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jose4j_project | jose4j | - | - | - |