CWE Code: 310
Vulnerability Type: privilege_escalation
CVSS Score: 1.9
CWE Name:  Cryptographic Issues
Summary: arm mbed tls before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker to recover the plaintext of rsa decryption, which is used in rsa-without-(ec)dh(e) cipher suites.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2018-12-05
Last Modified Date: 2019-02-05