CVE-2020-36315
PoC —CVSS 3.1
5.3 medium
EPSS
<1%p59
Published
()
Modified
Description
In RELIC before 2020-08-01, RSA PKCS#1 v1.5 signature forgery can occur because certain checks of the padding (and of the first two bytes) are inadequate. NOTE: this requires that a low public exponent (such as 3) is being used. The product, by default, does not generate RSA keys with such a low number.
- Vendors
- relic project
- Products
- relic
- Weakness
- CWE-327
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
In the news0 stories
No ingested article mentions this CVE yet.