VDB
BDU%3A2023-05436
BDU%3A2023-05436
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость пакета cryptography интерпретатора языка программирования Python, связанная с ошибками процедуры подтверждения подлинности сертификата, позволяющая нарушителю выполнить атаку типа "человек посередине"
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| NetApp Inc., Fedora Project, Wazuh, Inc, Сообщество свободного программного обеспечения | Active IQ Unified Manager for Microsoft Windows, Active IQ Unified Manager for VMware vSphere, Fedora, Wazuh, Management Service for Element Software and NetApp Hci, cryptography |
Timeline
- Sep 11, 2023 CVE Published
- Sep 13, 2024 CVE Updated
References
- https://github.com/pyca/cryptography/pull/9208 url
- https://github.com/pyca/cryptography/issues/9207 url
- https://github.com/pyca/cryptography/compare/41.0.1...41.0.2 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NMCCTYY3CSNQBFFYYC5DAV6KATHWCUZK/ url
- https://pypi.org/project/cryptography/#history url
- https://www.cybersecurity-help.cz/vdb/SB2023081446 url
- https://vuldb.com/ru/?id.234217 url
- https://security.netapp.com/advisory/ntap-20230824-0010/ advisory