SmallTown123/details-for-CVE-2022-46505

SmallTown123/details-for-CVE-2022-46505

GitHubGitHub
GitHubgithub.com
Releases0
MatrixSSL session resume bug
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-46505↗
7.5 HIGH—

An issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID field, resulting in the misuse of an all-zero MasterSecret that can decrypt secret data.