Description (CNA)
A flaw has been found in editso fuso up to 1.0.4-beta.7. This affects the function PenetrateRsaAndAesHandshake of the file src/net/penetrate/handshake/mod.rs. This manipulation of the argument priv_key causes inadequate encryption strength. Remote exploitation of the attack is possible. A high degree of complexity is needed for the attack. The exploitability is reported as difficult.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| editso / fuso | affected 1.0.4-beta.0; affected 1.0.4-beta.1; affected 1.0.4-beta.2; affected 1.0.4-beta.3; affected 1.0.4-beta.4; affected 1.0.4-beta.5; affected 1.0.4-beta.6; affected 1.0.4-beta.7 |
CWE
CWE-326, CWE-310
References
- https://vuldb.com/?id.321506
- https://vuldb.com/?ctiid.321506
- https://vuldb.com/?submit.635449
- https://chatgpt.com/share/68ae1bfa-8cd4-8005-8add-969bc42047b4
ADP enrichment
No English description supplied.
No references supplied.