Lucene search

[email protected]NVD:CVE-2023-50782

HistoryFeb 05, 2024 - 9:15 p.m.

CVE-2023-50782

2024-02-0521:15:11

CWE-208

CWE-203

[email protected]

web.nvd.nist.gov

flaw

python-cryptography

remote attack

tls server

rsa key exchange

exposure

confidential data

sensitive data

cve-2023-50782

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

41.6%

JSON

A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

Affected configurations

Nvd

Node

redhatansible_automation_platformMatch2.0

Node

redhatenterprise_linuxMatch8.0

redhatenterprise_linuxMatch9.0

Node

redhatupdate_infrastructureMatch4

Node

cryptography.iocryptographyRange<42.0.0python

Node

couchbasecouchbase_serverMatch7.6.0

couchbasecouchbase_serverMatch7.6.1

VendorProductVersionCPE
redhatansible_automation_platform2.0cpe:2.3:a:redhat:ansible_automation_platform:2.0:*:*:*:*:*:*:*
redhatenterprise_linux8.0cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
redhatenterprise_linux9.0cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
redhatupdate_infrastructure4cpe:2.3:a:redhat:update_infrastructure:4:*:*:*:*:*:*:*
cryptography.iocryptography*cpe:2.3:a:cryptography.io:cryptography:*:*:*:*:*:python:*:*
couchbasecouchbase_server7.6.0cpe:2.3:a:couchbase:couchbase_server:7.6.0:*:*:*:*:*:*:*
couchbasecouchbase_server7.6.1cpe:2.3:a:couchbase:couchbase_server:7.6.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	ansible_automation_platform	2.0	cpe:2.3:a:redhat:ansible_automation_platform:2.0:::::::*
redhat	enterprise_linux	8.0	cpe:2.3:o:redhat:enterprise_linux:8.0:::::::*
redhat	enterprise_linux	9.0	cpe:2.3:o:redhat:enterprise_linux:9.0:::::::*
redhat	update_infrastructure	4	cpe:2.3:a:redhat:update_infrastructure:4:::::::*
cryptography.io	cryptography	*	cpe:2.3:a:cryptography.io:cryptography::::::python::*
couchbase	couchbase_server	7.6.0	cpe:2.3:a:couchbase:couchbase_server:7.6.0:::::::*
couchbase	couchbase_server	7.6.1	cpe:2.3:a:couchbase:couchbase_server:7.6.1:::::::*