CVE-2020-25657

2021-01-1214:33:02

CWE-385

redhat

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.8%

JSON

A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.

CNA Affected

[
  {
    "product": "m2crypto",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All released versions of m2crypto"
      }
    ]
  }
]