Vulnerabilities > CVE-2023-50782 - Information Exposure Through Discrepancy vulnerability in multiple products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

NVD

Published: 2024-02-05

Updated: 2024-11-21

Summary

A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

Vulnerable Configurations

Part	Description	Count
Application	Redhat Redhat Ansible Automation Platform 2.0 Redhat Update Infrastructure 4	2
Application	Cryptography.Io Cryptography.Io Cryptography 0.1 Cryptography.Io Cryptography 0.2 Cryptography.Io Cryptography 0.2.1 Cryptography.Io Cryptography 0.2.2 Cryptography.Io Cryptography 0.3 Cryptography.Io Cryptography 0.4 Cryptography.Io Cryptography 0.5 Cryptography.Io Cryptography 0.5.1 Cryptography.Io Cryptography 0.5.2 Cryptography.Io Cryptography 0.5.3 Cryptography.Io Cryptography 0.5.4 Cryptography.Io Cryptography 0.6 Cryptography.Io Cryptography 0.6.1 Cryptography.Io Cryptography 0.7 Cryptography.Io Cryptography 0.7.1 Cryptography.Io Cryptography 0.7.2 Cryptography.Io Cryptography 0.8 Cryptography.Io Cryptography 0.8.1 Cryptography.Io Cryptography 0.8.2 Cryptography.Io Cryptography 0.9 Cryptography.Io Cryptography 0.9.1 Cryptography.Io Cryptography 0.9.2 Cryptography.Io Cryptography 0.9.3 Cryptography.Io Cryptography 1.0 Cryptography.Io Cryptography 1.0.1 Cryptography.Io Cryptography 1.0.2 Cryptography.Io Cryptography 1.1 Cryptography.Io Cryptography 1.1.1 Cryptography.Io Cryptography 1.1.2 Cryptography.Io Cryptography 1.2 Cryptography.Io Cryptography 1.2.1 Cryptography.Io Cryptography 1.2.2 Cryptography.Io Cryptography 1.2.3 Cryptography.Io Cryptography 1.3 Cryptography.Io Cryptography 1.3.1 Cryptography.Io Cryptography 1.3.2 Cryptography.Io Cryptography 1.3.3 Cryptography.Io Cryptography 1.3.4 Cryptography.Io Cryptography 1.4 Cryptography.Io Cryptography 1.5 Cryptography.Io Cryptography 1.5.1 Cryptography.Io Cryptography 1.5.2 Cryptography.Io Cryptography 1.5.3 Cryptography.Io Cryptography 1.6 Cryptography.Io Cryptography 1.7 Cryptography.Io Cryptography 1.7.1 Cryptography.Io Cryptography 1.7.2 Cryptography.Io Cryptography 1.8 Cryptography.Io Cryptography 1.8.1 Cryptography.Io Cryptography 1.8.2 Cryptography.Io Cryptography 1.9 Cryptography.Io Cryptography 2.0 Cryptography.Io Cryptography 2.0.1 Cryptography.Io Cryptography 2.0.2 Cryptography.Io Cryptography 2.0.3 Cryptography.Io Cryptography 2.1 Cryptography.Io Cryptography 2.1.1 Cryptography.Io Cryptography 2.1.2 Cryptography.Io Cryptography 2.1.3 Cryptography.Io Cryptography 2.1.4 Cryptography.Io Cryptography 2.2 Cryptography.Io Cryptography 2.2.1 Cryptography.Io Cryptography 2.2.2 Cryptography.Io Cryptography 2.3 Cryptography.Io Cryptography 2.3.1 Cryptography.Io Cryptography 2.4 Cryptography.Io Cryptography 2.4.1 Cryptography.Io Cryptography 2.4.2 Cryptography.Io Cryptography 2.5 Cryptography.Io Cryptography 2.6 Cryptography.Io Cryptography 2.6.1 Cryptography.Io Cryptography 2.7 Cryptography.Io Cryptography 2.8 Cryptography.Io Cryptography 2.9 Cryptography.Io Cryptography 2.9.1 Cryptography.Io Cryptography 2.9.2 Cryptography.Io Cryptography 3.0 Cryptography.Io Cryptography 3.1 Cryptography.Io Cryptography 3.1.1 Cryptography.Io Cryptography 3.2 Cryptography.Io Cryptography 3.2.1 Cryptography.Io Cryptography 3.3 Cryptography.Io Cryptography 3.3.1 Cryptography.Io Cryptography 3.3.2 Cryptography.Io Cryptography 3.4 Cryptography.Io Cryptography 3.4.1 Cryptography.Io Cryptography 3.4.2 Cryptography.Io Cryptography 3.4.3 Cryptography.Io Cryptography 3.4.4 Cryptography.Io Cryptography 3.4.5 Cryptography.Io Cryptography 3.4.6 Cryptography.Io Cryptography 3.4.7 Cryptography.Io Cryptography 3.4.8 Cryptography.Io Cryptography 35.0.0 Cryptography.Io Cryptography 36.0.0 Cryptography.Io Cryptography 36.0.1 Cryptography.Io Cryptography 36.0.2 Cryptography.Io Cryptography 37.0.0 Cryptography.Io Cryptography 37.0.1 Cryptography.Io Cryptography 37.0.2 Cryptography.Io Cryptography 37.0.3 Cryptography.Io Cryptography 37.0.4 Cryptography.Io Cryptography 38.0.0 Cryptography.Io Cryptography 38.0.1 Cryptography.Io Cryptography 38.0.2 Cryptography.Io Cryptography 38.0.3 Cryptography.Io Cryptography 38.0.4 Cryptography.Io Cryptography 39.0.0 Cryptography.Io Cryptography 39.0.1 Cryptography.Io Cryptography 39.0.2 Cryptography.Io Cryptography 40.0.0 Cryptography.Io Cryptography 40.0.1 Cryptography.Io Cryptography 40.0.2 Cryptography.Io Cryptography 41.0.0 Cryptography.Io Cryptography 41.0.1 Cryptography.Io Cryptography 41.0.2 Cryptography.Io Cryptography 41.0.3 Cryptography.Io Cryptography 41.0.4 Cryptography.Io Cryptography 41.0.5 Cryptography.Io Cryptography 41.0.6	120
Application	Couchbase Couchbase Couchbase Server 7.6.0 Couchbase Couchbase Server 7.6.1	2
OS	Redhat Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0	2

Common Weakness Enumeration (CWE)

CWE-203 - Information Exposure Through Discrepancy

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References