CVE-2020-25658CWE-385

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks

High · published November 12, 2020

CVSS v3.1
7.5
EPSS
2%
Percentile
76.3
In the wild
Unconfirmed
What it is

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01651 · 76.3th percentile
Weakness
CWE-385 · Covert Timing Channel
Published
2020-11-12T13:48Z
EPSS history
Timeline
  • 12 NOV 13:48Z
    It was found that python-rsa is vulnerable to Bleichenbacher timing attacks
    cvelistv5