CVE-2025-22228 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

BCryptPasswordEncoder.matches(CharSequence,String) will incorrectly return true for passwords larger than 72 characters as long as the first 72 characters are t…
High CVSS: 7.4

CVE-2025-22228

BCryptPasswordEncoder.matches(CharSequence,String) will incorrectly return true for passwords larger than 72 characters as long as the first 72 characters are the same.
Vendor
-
Product
-
CWE
CWE-287
Yayın Tarihi
2025-03-20 06:15:23
Güncelleme
2025-04-25 23:15:16
Source Identifier
security@vmware.com
KEV Date Added
-

Kategoriler

CWE-287 HIGH 2025

Referanslar

https://spring.io/security/cve-2025-22228 https://security.netapp.com/advisory/ntap-20250425-0009/