CVE-2024-13454

The Easy-RSA certificate management tool (versions 3.0.5 through 3.1.7 ) is vulnerable to a brute-force attack due to the use of a weak encryption algorithm, specifically cipher:des-ede3-cbc. This issue affects the build-ca command when creating a private CA key using OpenSSL 3 . A local attacker...