CVE ID:	CVE-2016-1000345
Description:	In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES/ECIES CBC mode vulnerable to padding oracle attack. For BC 1.55 and older, in an environment where timings can be easily observed, it is possible with enough observations to identify when the decryption is failing due to padding.
Test IDs:	1.3.6.1.4.1.25623.1.0.891418
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1000345 https://github.com/bcgit/bc-java/commit/21dcb3d9744c83dcf2ff8fcee06dbca7bfa4ef35#diff-4439ce586bf9a13bfec05c0d113b8098 https://security.netapp.com/advisory/ntap-20181127-0004/ https://www.oracle.com/security-alerts/cpuoct2020.html https://www.oracle.com/security-alerts/cpuoct2020.html https://lists.debian.org/debian-lts-announce/2018/07/msg00009.html RedHat Security Advisories: RHSA-2018:2669 https://access.redhat.com/errata/RHSA-2018:2669 RedHat Security Advisories: RHSA-2018:2927 https://access.redhat.com/errata/RHSA-2018:2927 https://usn.ubuntu.com/3727-1/