Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4160
HistoryMay 03, 2017 - 8:41 a.m.

Private RSA Key Disclsoure

2017-05-0308:41:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

0.005 Low

EPSS

Percentile

77.6%

math/big in github.com/golang/go allows attackers to obtain private RSA keys. These can be obtained due to a flaw in the Int.Exp Montgomery code when carrying propagation.