Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Ruby Inadequate Encryption Strength Vulnerability - CVE-2011-4121 - Vulnerability Database
Ruby

Ruby Inadequate Encryption Strength Vulnerability - CVE-2011-4121

Critical
Reference: CVE-2011-4121
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2011-4121
Title: Ruby Inadequate Encryption Strength Vulnerability
Overview:

The OpenSSL extension of Ruby (Git trunk) versions after 2011-09-01 up to 2011-11-03 always generated an exponent value of 39139 to be used for private RSA key generation. A remote attacker could use this flaw to bypass or corrupt integrity of services depending on strong private RSA keys generation mechanism.