2 results · Feed
-
Medium 6.5
Jss: jss: jsstrustmanager does not verify nss trust flags on ca certificates
A flaw was found in JSS (Java Security Services). The JSSTrustManager class does not verify NSS trust flags when validating CA certificates, allowing certificates present in the NSS database without TRUSTED_CA flags to be accepted as trust anchors for TLS con…
-
Unscored —
A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the se…