Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:29927
HistoryApr 07, 2021 - 6:02 a.m.

Insecure Cryptographic Functions

2021-04-0706:02:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
phpseclib
rsa
pkcs#1
signature verification
vulnerability
cryptographic functions
mishandled

EPSS

0.003

Percentile

68.4%

phpseclib/phpseclib uses insecure cryptographic functions. The vulnerability exists due to a mishandled RSA PKCS#1 v1.5 signature verification.