Description
A flaw has been found in editso fuso up to 1.0.4-beta.7. This affects the function PenetrateRsaAndAesHandshake of the file src/net/penetrate/handshake/mod.rs. This manipulation of the argument priv_key causes inadequate encryption strength. Remote exploitation of the attack is possible. A high degree of complexity is needed for the attack. The exploitability is reported as difficult.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
editso fuso
1.0.4-beta.0affected1.0.4-beta.1affected1.0.4-beta.2affected1.0.4-beta.3affected1.0.4-beta.4affected1.0.4-beta.5affected1.0.4-beta.6affected1.0.4-beta.7affected