Lucene search
+L

1 matches found

RubySec
RubySec
added 2019/11/26 12:0 a.m.10 views

Private Ruby OpenSSL RSA key generation is always "1"

The OpenSSL extension of Ruby Git trunk versions after 2011-09-01 up to 2011-11-03 always generated an exponent value of '1' to be used for private RSA key generation. A remote attacker could use this flaw to bypass or corrupt integrity of services, depending on strong private RSA keys generation...

9.8CVSS6.9AI score0.02529EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder