CyberRota Analysis
AI-GeneratedBouncy Castle for Java versions prior to 1.85, as well as specific LTS and FIPS versions, are vulnerable to a Name Constraints bypass due to the handling of trailing dots in rfc822Name and URI fields. This vulnerability could allow attackers to circumvent security restrictions, potentially leading to unauthorized access or data exposure. Organizations using affected versions of Bouncy Castle for Java should prioritize patching to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).