Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS#11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenSC 'pkcs11-tool'不安全关键世代漏洞
Vulnerability Description
OpenSC是一个基于PKCS#11的实现,为各种unix和linux操作系统提供一个开源的数字证书应用(邮件加密、身份认证,智能卡应用等)的工具。 OpenSC 0.11.7版本的pkcs11-tool中存在src/tools/pkcs11-tool.c,当与未明的第三方PKCS#11模块一起使用时,会生成具有错误的公开指数的RSA索引,这会允许攻击者读取准备被编码的信息中的cleartext格式。
CVSS Information
N/A
Vulnerability Type
N/A