First published: Wed Jul 11 2018(Updated: )
A Security Feature Bypass vulnerability exists in MSR JavaScript Cryptography Library that is caused by incorrect arithmetic computations, aka "MSR JavaScript Cryptography Library Security Feature Bypass Vulnerability." This affects Microsoft Research JavaScript Cryptography Library.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Research JavaScript Cryptography Library | =1.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-8319 has a medium severity rating due to its potential for security feature bypass.
CVE-2018-8319 allows attackers to bypass security features due to incorrect arithmetic computations in the library.
To fix CVE-2018-8319, users should upgrade to a patched version of the Microsoft Research JavaScript Cryptography Library.
CVE-2018-8319 specifically affects version 1.4 of the Microsoft Research JavaScript Cryptography Library.
Currently, there are no known workarounds for CVE-2018-8319; upgrading is recommended.