python-cryptography 信任管理问题漏洞

🗓️ 14 Jul 2023 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 1 Views

Vulnerability in python-cryptography before 41.0.2 due to SSH certificates with critical options.

Reporter	Title	Published	Views	Family All 66
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to weakened security in Python Cryptographic Authority [CVE-2023-38325]	30 Nov 202318:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.6.2 fixes multiple security vulnerabilities	6 Oct 202316:11	–	ibm
IBM Security Bulletins	Security Bulletin: Storage Virtualize ansible collection is affected by a vulnerability in the Python Cryptographic Authority package [CVE-2023-38325]	9 Oct 202313:41	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Netezza Performance Server Replication Services	27 Feb 202619:55	–	ibm
IBM Security Bulletins	Security Bulletin: z/Transaction Processing Facility is affected by a vulnerability in the Python Cryptographic Authority package [CVE-2023-38325]	29 Aug 202323:49	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	15 Feb 202413:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Python Cryptographic Authority cryptography affects IBM Process Mining . CVE-2023-38325	11 Oct 202309:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Python Cryptographic Authority cryptography	27 Sep 202321:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOps	26 Mar 202503:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in cryptography may affect IBM Spectrum Sentinel Anomaly Scan Engine (CVE-2023-23931, CVE-2023-38325)	15 Dec 202313:02	–	ibm

Source	Link
github	www.github.com/pyca/cryptography/issues/9207
github	www.github.com/pyca/cryptography/compare/41.0.1...41.0.2
pypi	www.pypi.org/project/cryptography/
security	www.security.netapp.com/advisory/ntap-20230824-0010/
github	www.github.com/pyca/cryptography/pull/9208
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/NMCCTYY3CSNQBFFYYC5DAV6KATHWCUZK/
cxsecurity	www.cxsecurity.com/cveshow/CVE-2023-38325/
oracle	www.oracle.com/security-alerts/cpujan2024.html

20 Feb 2026 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.5

EPSS0.01168

SSVC

python-cryptography vulnerability ssh certificates critical options version before 41.0.2