[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fm3xacDnkdwsSIgtGiWK3U8O87Cs1IaH3ptYU0v3ONR8":3,"g5a-risk:CVE-2020-26939":122},{"success":4,"data":5,"meta":120},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":26,"epssTimeSeries":42,"severity":43,"affectedProducts":44,"affectedProductsCount":53,"references":54,"referencesCount":69,"weaknesses":70,"weaknessesCount":79,"isActivelyExploited":40,"cisaInfo":26,"otxData":26,"relatedBlogPosts":80,"seoMetadata":81,"configurations":106,"relatedVendorCves":118,"notableEvents":119},"CVE-2020-26939","What is CVE-2020-26939?","In Legion of the Bouncy Castle BC before 1.61 and BC-FJA before 1.0.1.2, attackers can obtain sensitive information about a private exponent because of Observable Differences in Behavior to Error Inputs. This occurs in org.bouncycastle.crypto.encodings.OAEPEncoding. Sending invalid ciphertext that decrypts to a short payload in the OAEP Decoder could result in the throwing of an early exception, potentially leaking some information about the private exponent of the RSA private key performing the encryption.","In Legion of the Bouncy Castle BC before 1.61 and BC-FJA before 1.0.1.2, attackers can obtain sensitive information about a private exponent because of Obser...","2020-11-02T22:15:13.393","2025-07-17T17:04:58.987",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,[],[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":40,"ObtainAllPrivilege":40,"ObtainUserPrivilege":40,"ObtainOtherPrivilege":40,"UserInteractionRequired":40},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":37,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"",10,2.9,false,0.00925,[41,41,41,41,41,41,41],"Medium",[45,50],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"bouncycastle","fips_java_api","*","cpe:2.3:a:bouncycastle:fips_java_api:*:*:*:*:*:*:*:*",{"vendor":46,"product":51,"version":48,"criteria":52,"vulnerable":4},"legion-of-the-bouncy-castle","cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle:*:*:*:*:*:*:*:*",2,[55,61,65,67],{"url":56,"source":57,"tags":58},"https:\u002F\u002Fgithub.com\u002Fbcgit\u002Fbc-java\u002Fwiki\u002FCVE-2020-26939","GitHub",[59,60],"Patch","Third Party Advisory",{"url":62,"source":63,"tags":64},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr8c36ba34e80e05eecb1f80071cc834d705616f315b634ec0c7d8f42e%40%3Cissues.solr.apache.org%3E","Apache",[],{"url":56,"source":57,"tags":66},[59,60],{"url":62,"source":63,"tags":68},[],4,[71],{"id":72,"name":73,"description":74,"extendedDescription":75,"status":76,"abstraction":77,"structure":78},"CWE-203","Observable Discrepancy","The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.","Discrepancies can take many forms, and variations may be detectable in timing, control flow, communications such as replies or requests, or general behavior. These discrepancies can reveal information about the product's operation or internal state to an unauthorized actor. In some cases, discrepancies can be used by attackers to form a side channel.","Incomplete","Base","Simple",1,[],{"title":82,"metaDescription":83,"keywords":84,"canonicalUrl":85,"structuredData":86},"What is CVE-2020-26939? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-26939, a medium severity cyber security vulnerability from 2020. In Legion of the Bouncy Castle BC before 1.61 and BC-FJA ...","CVE-2020-26939, CVE-2020-26939 vulnerability, CVE-2020-26939 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, bouncycastle security, fips_java_api vulnerability, legion-of-the-bouncy-castle vulnerability","\u002Fwhat-is\u002Fcve-2020-26939",{"@context":87,"@type":88,"headline":82,"description":83,"datePublished":10,"dateModified":11,"author":89,"publisher":93,"about":97,"mainEntityOfPage":101,"articleSection":104,"keywords":105},"https:\u002F\u002Fschema.org","TechArticle",{"@type":90,"name":91,"url":92},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":90,"name":91,"url":92,"logo":94},{"@type":95,"url":96},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":98,"name":6,"description":99,"additionalType":100},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":102,"@id":103},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-26939","Cybersecurity","CVE-2020-26939, CVE-2020-26939 vulnerability, CVE-2020-26939 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[107],{"Operator":26,"Negate":26,"Nodes":108},[109],{"Operator":110,"Negate":40,"CPEMatch":111},"OR",[112,115],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":113,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":114,"VersionEndIncluding":26},"F0B7168C-AAB1-4E4D-8B38-C50C38FBF3D6","1.0.1.2",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":116,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":117,"VersionEndIncluding":26},"B5ECAFEE-393F-426E-8BF8-752D09EFF9F2","1.61",[],[],{"lastModified":11,"cacheTime":121,"version":33},1792249637750,{"score":123,"band":124,"action":125,"scoredAt":126},21,"Low","Monitor","2026-10-16T06:49:46.760832+00:00"]