提出 #635449: editso fuso dev CWE-326: Inadequate Encryption Strength情報

タイトルeditso fuso dev CWE-326: Inadequate Encryption Strength
説明In file src/net/penetrate/handshake/mod.rs let priv_key = rsa::RsaPrivateKey::new(&mut rand::thread_rng(), 1024)?; The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
ソース⚠️ https://github.com/editso/fuso/blob/refactor/dev/src/net/penetrate/handshake/mod.rs
ユーザー dev03301 (UID 88717)
送信2025年08月15日 10:51 (10 月 ago)
モデレーション2025年08月26日 22:44 (11 days later)
ステータス承諾済み
VulDBエントリ321506 [editso fuso 迄 1.0.4-beta.7 mod.rs PenetrateRsaAndAesHandshake priv_key 弱い暗号化]
ポイント18

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!