Lucene search
+L

4 matches found

attackerkb
attackerkb
•added 2021/10/11 5:15 p.m.•12 views

CVE-2021-41117

keypair is a a RSA PEM key generator written in javascript. keypair implements a lot of cryptographic primitives on its own or by borrowing from other libraries where possible, including node-forge. An issue was discovered where this library was generating identical RSA keys used in SSH. This wou...

9.1CVSS7.8AI score0.03091EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2021/10/11 5:10 p.m.•56 views

CVE-2021-41117 Insecure random number generation

keypair is a a RSA PEM key generator written in javascript. keypair implements a lot of cryptographic primitives on its own or by borrowing from other libraries where possible, including node-forge. An issue was discovered where this library was generating identical RSA keys used in SSH. This wou...

8.7CVSS9.6AI score0.03091EPSS
SaveExploits1References2
Mend
Mend
•added 2021/10/11 5:10 p.m.•5 views

CVE-2021-41117

keypair is a a RSA PEM key generator written in javascript. keypair implements a lot of cryptographic primitives on its own or by borrowing from other libraries where possible, including node-forge. An issue was discovered where this library was generating identical RSA keys used in SSH. This wou...

9.4CVSS0.03091EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2021/10/11 12:00 a.m.•4 views

PT-2021-23101

Name of the Vulnerable Software and Affected Versions keypair versions up to and including 1.0.3 Description The keypair library, a JavaScript RSA PEM key generator, has a poor random number generation issue. This is due to the library not relying entirely on a platform-provided CSPRNG and instea...

9.1CVSS0.03091EPSS
SaveExploits1References14
Rows per page
Query Builder