A vulnerability has been discovered within the sphere of cryptography which could allow hackers to penetrate.
CVE-2020-28052 is an authentication bypass bug in the open BSDBcrypt class of the widely used bouncy castle library.
Through this crack, a hacker can bypass password through the application of BCrypt algorithm to hash the password.
From past research it was shown that 20% of tested passwords were successfully bypassed within 1000 attempts.
It has been discovered that some password can be bypassed with enough attempt and that in rare case some password can be bypassed with any input.
So this flaw was discovered by the bouncy castle on October 20 and it has been fixed however larger percentage of organization using the at-risk function of bouncy castle haven’t touched their system and this makes its user venerable and at risk.
Leave a Reply