PT-2019-6887 · Cryptocat · Cryptocat

Security Curmudgeon · Publicado 2019-11-04 · Atualizado 2019-11-05 · CVE-2013-2257

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cryptocat versions prior to 2.0.42

Description The issue concerns a weakness in the generation of ECC private keys for group chats, which could potentially be exploited through brute force.

Recommendations For versions prior to 2.0.42, update to version 2.0.42 or later to resolve the issue.

Correção

Improper Restriction of Excessive Authentication Attempts

Enumeração de Fraquezas

CWE-307

Identificadores relacionados

CVE-2013-2257

Produtos afetados

Cryptocat

Referências · 4

• https://tobtu.com/decryptocat.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-2257 · Nota de Segurança
• https://securityfocus.com/bid/61087 · Nota
• https://openwall.com/lists/oss-security/2013/07/10/15 · Nota