Bouncy Castle fixes crypto API authentication bypass flaw

A severe authentication bypass vulnerability has been reported in Bouncy Castle, a popular open-source cryptography library. When exploited, the vulnerability (CVE-2020-28052) can allow an attacker to gain access to user and administrator accounts due to a cryptographic weakness in the manner passwords are checked. […] This post appeared first on Bleeping Computer
Author: Ax Sharma