Описание
PGP 5.5.x through 6.5.3 does not properly check if an Additional Decryption Key (ADK) is stored in the signed portion of a public certificate, which allows an attacker who can modify a victim's public certificate to decrypt any data that has been encrypted with the modified certificate.
Ссылки
- Third Party AdvisoryUS Government Resource
- PatchVendor Advisory
- Third Party AdvisoryUS Government Resource
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:pgp:pgp:5.5.3i:*:*:*:*:*:*:*
cpe:2.3:a:pgp:pgp:6.5.1i:*:*:*:*:*:*:*
cpe:2.3:a:pgp:pgp:6.5.3i:*:*:*:*:*:*:*
EPSS
Процентиль: 63%
0.0045
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 3 лет назад
PGP 5.5.x through 6.5.3 does not properly check if an Additional Decryption Key (ADK) is stored in the signed portion of a public certificate, which allows an attacker who can modify a victim's public certificate to decrypt any data that has been encrypted with the modified certificate.
EPSS
Процентиль: 63%
0.0045
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other