Information Disclosure

2020-06-0201:46:25

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

64.8%

JSON

rsa is vulnerable to information disclosure. The vulnerability exists as rsa ignores prepended \0 bytes during the decryption of a ciphertext in PKCS1_v1_5, where it is supposed to have failed, allowing the interference that this library is used for cryptography.

CPENameOperatorVersion
rsaeq4.0
python-rsaeq3.4.2__1.el7
python-rsaeq4.5__1.el7
python-rsaeq3.4.1__3.el7
python-rsaeq3.4.1__1.el7
python-rsaeq3.3__2.el7ost
jenkins-2-pluginseq4.3.1574944219__1.el7
jenkins-2-pluginseq4.2.1581952573__1.el7
jenkins-2-pluginseq4.1.1572877452__1.el7
jenkins-2-pluginseq3.11.1559667994__1.el7

Name	Operator	Version
rsa	eq	4.0
python-rsa	eq	3.4.2__1.el7
python-rsa	eq	4.5__1.el7
python-rsa	eq	3.4.1__3.el7
python-rsa	eq	3.4.1__1.el7
python-rsa	eq	3.3__2.el7ost
jenkins-2-plugins	eq	4.3.1574944219__1.el7
jenkins-2-plugins	eq	4.2.1581952573__1.el7
jenkins-2-plugins	eq	4.1.1572877452__1.el7
jenkins-2-plugins	eq	3.11.1559667994__1.el7