CVE-2023-50782CWE-203

Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659

High · published February 5, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
65.9
In the wild
Unconfirmed
What it is

A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01118 · 65.9th percentile
Weakness
CWE-203 · Observable Discrepancy
Published
2024-02-05T20:45Z
EPSS history
Timeline
  • 05 FEB 20:45Z
    Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659
    cvelistv5