En bref
- CVE-2023-50781 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant m2crypto, m2crypto (m2crypto project), update infrastructure (redhat).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.1%, plus élevée que 66.3% des vulnérabilités.
- Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.
Description
A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.
NVD description
A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free