CVE-2023-50781

Summary

A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

Affected Software

Weaknesses

• CWE-203: Observable Discrepancy

Workarounds

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://access.redhat.com/security/cve/CVE-2023-50781
• https://bugzilla.redhat.com/show_bug.cgi?id=2254426

Additional References

• https://cert-portal.siemens.com/productcert/html/ssa-265688.html

References

• https://access.redhat.com/security/cve/CVE-2023-50781
• https://bugzilla.redhat.com/show_bug.cgi?id=2254426

• ←Previous
• Next→