CVE-2023-50782

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Feb 5, 2024
Updated: Jul 26, 2024
CWE ID 208
CWE ID 203

Summary

CVE-2023-50782 is a newly discovered vulnerability affecting the python-cryptography package. This issue enables a remote attacker to decrypt messages in Transport Layer Security (TLS) servers that employ RSA key exchanges. By exploiting this flaw, an attacker could potentially gain access to sensitive or confidential information that was intended to remain encrypted. The vulnerability poses a significant risk to organizations using python-cryptography for securing their data transmissions. It is recommended that affected parties apply the available patch or update to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Red Hat Enterprise Linux
  • Red Hat Update Infrastructure
  • Red Hat Ansible Automation Platform

Affected Vendors

  • Red Hat
  • Python Cryptography Project