Incorrect Authentication Tag length usage in AES GCM decryption in OpenIDC/cjose

CVE-2023-37464

What is CVE-2023-37464?

The OpenIDC/cjose library features a vulnerability in its AES GCM decryption routine, which incorrectly processes the Authentication Tag length. It fails to adhere to the specified fixed length of 16 octets in the specification. As a result, this misconfiguration allows an attacker to exploit the system by providing a truncated Authentication Tag and manipulating the JSON Web Encryption (JWE). Users are advised to update to version 0.6.2.2 or higher immediately. For those who cannot update, it is recommended to switch to an alternative encryption algorithm, such as AES CBC, to mitigate potential security risks.

References