CVE-2024-13454

The Easy-RSA certificate management tool (versions 3.0.5 through 3.1.7 ) is vulnerable to a weak encryption algorithm when creating a private CA key using OpenSSL 3 . Specifically, the build-ca command uses the insecure cipher:des-ede3-cbc algorithm, which allows a local attacker to more easily b...