CVE-2025-46833

Programs/P73_SimplePythonEncryption.py has weak cryptographic key

State
Published
Severity
4.6 Medium
Published
May 8, 2025
Updated
May 8, 2025
Reserved
Apr 30, 2025

Read the record on cve.org

Description

Programs/P73_SimplePythonEncryption.py illustrates a simple Python encryption example using the RSA Algorithm. In versions prior to commit 6ce60b1, an attacker may be able to decrypt the data using brute force attacks and because of this the whole application can be impacted. This issue has been patched in commit 6ce60b1. A workaround involves increasing the key size, for RSA or DSA this is at least 2048 bits, for ECC this is at least 256 bits.

Scores

CVSSScoreVectorSource
4.04.6 MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:UGitHub_M

Weaknesses

  • CWE-326 Inadequate Encryption Strength

Affected Products

ProductVersions
python-progrramesShashikantSingh09
  • < 6ce60b1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.