CVE-2016-1000345

CVE-2016-1000345 describes a padding oracle vulnerability affecting the Bouncy Castle JCE Provider version 1.55 and earlier, specifically impacting DHIES/ECIES CBC mode. This flaw allows an attacker to discern padding failures through timing observations, potentially leading to information disclosure. Rated Medium with a CVSS score of 5.9, the attack requires high complexity but can result in high confidentiality impact without user interaction. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.