Beveiligingsadvies

CVE-2021-3798

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-08-23 15:48:58

Laatst bijgewerkt 2024-08-03 17:09:09

Toegewezen door redhat

CVSS-score geen score

Status PUBLISHED

Beschrijving

A flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is valid when an EC key is created via C_CreateObject, nor when C_DeriveKey is used with ECDH public data. This may allow a malicious user to extract the private key by performing an invalid curve attack.

← Alle CVE's bekijken Bekijk op cve.org ↗