Product: Java Platform, Standard Edition (Java SE) A security vulnerability in the Java Runtime Environment with verifying HMAC digests may allow authentication to be bypassed. This could allow a user to forge a digital signature that would be accepted as valid. Applications that validate HMAC-based digital signatures may be vulnerable to this type of attack.Note: This vulnerability cannot be exploited by an untrusted applet or Java Web Start application. Sun acknowledges, with thanks, Coda Hale for bringing this issue to ...
Product: Java Platform, Standard Edition (Java SE)
A security vulnerability in the Java Runtime Environment with verifying HMAC digests may allow authentication to be bypassed. This could allow a user to forge a digital signature that would be accepted as valid. Applications that validate HMAC-based digital signatures may be vulnerable to this type of attack.
Note: This vulnerability cannot be exploited by an untrusted applet or Java Web Start application.
Sun acknowledges, with thanks, Coda Hale for bringing this issue to our attention.
State: Resolved
First released: 03-Nov-2009
