CVE-2020-15522

Medium

Advisory

Published 20 May 2021In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.015; 73rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 105; of 17,781 indexed, latest versions
Container images: 105; deployed by those charts
Fix available: 6 of 7; affected packages

Timing based private key exposure in Bouncy Castle

Carried by container images the latest versions of 105 of 17,781 indexed charts deploy, on 105 images.

Affected package	Affected versions	Fixed in	Images
bouncycastledeb	1.61-1	no fix listed	1
bcprov-jdk15onmaven	1.50, 1.51, 1.52, 1.53+11 more	1.66	95
bcprov-ext-jdk15onmaven	1.50, 1.59, 1.60, 1.61+1 more	1.66	16
bc-fipsmaven	1.0.1, 1.0.2	1.0.2.1	13
bcprov-jdk15to18maven	1.63, 1.65	1.66	4
bcprov-jdk16maven	1.46	1.66	2
BouncyCastlenuget	1.8.5	1.8.7	1

OSV records: GHSA-6xx3-rg99-gc3p UBUNTU-CVE-2020-15522

Charts affected

105 by stars

Chart

Latest

Affected images

Radar Score

drillwearefrank

1.3.6

1 of 3 See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2020-15522.

Container image	Digest	Package	Fixed in
apache/drill :1.21.1	1f96558fd292	bcprov-jdk15on@1.57	1.66

Open the chart page →

9,397

webencryptorwebencryptor

1.1.0

1 of 1 See more

webencryptor webencryptor 1.1.0

1 of the 1 container images this version deploys carry CVE-2020-15522.

Container image	Digest	Package	Fixed in
beubi/webencryptor :latest	a02c2e200920	BouncyCastle@1.8.5	1.8.7

Open the chart page →

1,968

opendistro-eswitcom-gmbh

1.13.3

1 of 3 See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2020-15522.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch :1.13.3	2acfa1dcc5f8	bc-fips@1.0.2	1.0.2.1

Open the chart page →

5,806

is-pattern-1wso2is-pattern1

5.11.0

1 of 2 See more

is-pattern-1 wso2is-pattern1 5.11.0

1 of the 2 container images this version deploys carry CVE-2020-15522.

Container image	Digest	Package	Fixed in
massimolauri/wso2is :5.11.0-centos	e08abf0ce767	bcprov-jdk15on@1.60	1.66

Open the chart page →

6,213

zahori-processzahori

1.0.1

1 of 1 See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2020-15522.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-process :0.1.13	351f8a220ed7	bcprov-jdk15on@1.58	1.66

Open the chart page →

3,480

Container images carrying it

105 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container image	Digest	Package	Fixed in	Used by
gradiant/hbase-base :2.0.1	a1ee6de94c04	bcprov-jdk15on@1.59	1.66	4
apache/shenyu-bootstrap :2.4.2	0bd3b25c4be4	bcprov-jdk15on@1.64	1.66	3
amazon/opendistro-for-elasticsearch :1.13.3	2acfa1dcc5f8	bc-fips@1.0.2	1.0.2.1	2
apachepulsar/pulsar-manager :v0.1.0	b341ef76a852	bcprov-ext-jdk15on@1.59 bcprov-jdk15on@1.60	1.66 1.66	2
empathyco/elasticsearch :6.6.2-memlock	bcf4365ee7ec	bcprov-jdk15on@1.59	1.66	2
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	bcprov-jdk15on@1.64	1.66	2
library/elasticsearch :7.17.3	5e6ac15bf6a5	bc-fips@1.0.2 bcprov-jdk15on@1.64	1.0.2.1 1.66	2
linuxserver/ubooquity :2.1.2-ls36	9932d6759112	bcprov-jdk15on@1.53	1.66	2
mbentley/omada-controller :4.3	f4e682274bed	bcprov-ext-jdk15on@1.50	1.66	2
opensearchproject/opensearch :1.1.0	967d7f57f72f	bc-fips@1.0.2	1.0.2.1	2
scorpiobroker/scorpio :config-server_1.1.0	c46c1517e523	bcprov-jdk15on@1.60	1.66	2
5200710/hive :3.1.3-postgresql-metastore	e34ab066d2ed	bcprov-jdk15on@1.60	1.66	1
airbyte/cron :0.40.17	caf4f551c546	bcprov-jdk15on@1.64	1.66	1
amazon/opendistro-for-elasticsearch :1.4.0	6df71eb04639	bc-fips@1.0.1 bcprov-jdk15on@1.62	1.0.2.1 1.66	1
andrianrf/iso-client :latest	ba560086ce15	bcprov-jdk15on@1.51	1.66	1
andrianrf/iso-server :latest	7da47f525c7d	bcprov-jdk15on@1.51	1.66	1
anguda/ant-media :2.5	c435285fc241	bcprov-jdk15on@1.60	1.66	1
apache/drill :1.21.1	1f96558fd292	bcprov-jdk15on@1.57	1.66	1
apache/skywalking-oap-server :8.1.0-es7	641237e0299b	bcprov-ext-jdk15on@1.61 bcprov-jdk15on@1.61	1.66 1.66	1
apache/skywalking-ui :8.1.0	67d50e4deff4	bcprov-jdk15on@1.55	1.66	1
assistiot/cybersecurity-monitoring_id-elk :latest	ba1d85ec3739	bc-fips@1.0.2	1.0.2.1	1
assistiot/cybersecurity-monitoring_ir-ctx :latest	ae8b3d72eb5d	bcprov-jdk15on@1.61	1.66	1
assistiot/cybersecurity-monitoring_ir-elk :latest	4228b7a8ef40	bc-fips@1.0.2 bcprov-jdk15on@1.64	1.0.2.1 1.66	1
atlassian/confluence-server :7.10.0	3b9222ab32ef	bcprov-jdk15on@1.64	1.66	1
atlassian/jira-software :8.14.0	37bc46cbec1a	bcprov-jdk15on@1.50	1.66	1
beubi/webencryptor :latest	a02c2e200920	BouncyCastle@1.8.5	1.8.7	1
bivas/presto :0.196	05545994f806	bcprov-jdk15on@1.51	1.66	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	bouncycastle@1.61-1	no fix listed	1
choerodon/event-store-service :0.8.0	3c94c97f6f69	bcprov-jdk15on@1.55	1.66	1
dbanda/livy :0.8	0ca125e68e53	bcprov-jdk15on@1.51	1.66	1
dremio/dremio-oss :24.1.0	80ed2e3b7c43	bcprov-jdk15on@1.64	1.66	1
drpcorg/dshackle :0.54.0	8858fae1859d	bcprov-jdk15on@1.61 bcprov-jdk15to18@1.63	1.66 1.66	1
emeraldpay/dshackle :0.14.0	126f0ae0b388	bcprov-jdk15on@1.61 bcprov-jdk15to18@1.63	1.66 1.66	1
emeraldpay/dshackle :0.12	ac2a4bc66ab6	bcprov-jdk15on@1.61 bcprov-jdk15to18@1.63	1.66 1.66	1
empathyco/elasticsearch :7.17.2-memlock	03e724e41eeb	bc-fips@1.0.2 bcprov-jdk15on@1.64	1.0.2.1 1.66	1
geonetwork/gn-cloud-ogc-api-records-service :4.2.8-0	20c9bb761f67	bcprov-jdk15on@1.64	1.66	1
geoservercloud/geoserver-cloud-gateway :1.0-RC2	ca58b74529cd	bcprov-jdk15on@1.64	1.66	1
gocd/gocd-server :v19.3.0	2da45cb09d57	bcprov-jdk15on@1.59	1.66	1
gradiant/hdfs :3.2.2	e3bf364fe713	bcprov-jdk15on@1.60	1.66	1
graviteeio/am-gateway :4.12.6	07b7f6dc267a	bcprov-jdk15on@1.64	1.66	1
graviteeio/am-management-api :4.12.6	a8eb04ee0c70	bcprov-jdk15on@1.64	1.66	1
gurolakman/smsf-configuration :1.0.4	9abb3882bcbd	bcprov-ext-jdk15on@1.50 bcprov-jdk15on@1.50	1.66 1.66	1
gurolakman/smsf-dispatcher :1.0.4	6537e8ed8de8	bcprov-ext-jdk15on@1.50 bcprov-jdk15on@1.50	1.66 1.66	1
gurolakman/smsf-momt :1.0.4	ce23b20a8a17	bcprov-ext-jdk15on@1.50 bcprov-jdk15on@1.50	1.66 1.66	1
gurolakman/smsf-registration :1.0.4	b22e746edd5d	bcprov-ext-jdk15on@1.50 bcprov-jdk15on@1.50	1.66 1.66	1
gurolakman/ussigw-configuration :1.0.4	bf18525c5ad9	bcprov-ext-jdk15on@1.50 bcprov-jdk15on@1.50	1.66 1.66	1
gurolakman/ussigw-core :1.0.4	8739565c3ea2	bcprov-ext-jdk15on@1.50 bcprov-jdk15on@1.50	1.66 1.66	1
ibmcom/app-nav-api :1.0.1	ce9d2a564273	bcprov-ext-jdk15on@1.62 bcprov-jdk15on@1.62	1.66 1.66	1
ibmcom/bai-elasticsearch-dev :19.0.2	5441dba2fa00	bcprov-jdk15on@1.61	1.66	1
ibmcom/microclimate-file-watcher :latest	ab3fd1fdfa18	bcprov-jdk15on@1.55	1.66	1