CVE-2023-50782
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-50782 is a newly discovered vulnerability affecting the python-cryptography package. This issue enables a remote attacker to decrypt messages in Transport Layer Security (TLS) servers that employ RSA key exchanges. By exploiting this flaw, an attacker could potentially gain access to sensitive or confidential information that was intended to remain encrypted. The vulnerability poses a significant risk to organizations using python-cryptography for securing their data transmissions. It is recommended that affected parties apply the available patch or update to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Red Hat Enterprise Linux
- Red Hat Update Infrastructure
- Red Hat Ansible Automation Platform
Affected Vendors
- Red Hat
- Python Cryptography Project
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions