A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - m2crypto: Bleichenbacher timing attacks in the RSA decryption API - incomplete fix for CVE-2020-25657     (CVE-2023-50781)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - m2crypto: Bleichenbacher timing attacks in the RSA decryption API - incomplete fix for CVE-2020-25657     (CVE-2023-50781)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

ID	Name	Product	Family	Severity
199519	RHEL 9 : pywbem (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199512	RHEL 8 : pywbem (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
196741	RHEL 7 : m2crypto (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
196710	RHEL 6 : m2crypto (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2023-50781

high

Tenable Plugins

high

high

high

high