Cryptographic Issue Affecting django-ca package, versions [,1.10.0)
Snyk CVSS
Attack Complexity
High
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-DJANGOCA-174566
- published 1 May 2019
- disclosed 20 Oct 2018
- credit Unknown
How to fix?
Upgrade django-ca
to version 1.10.0 or higher.
Overview
django-ca is a tool to manage TLS certificate authorities and easily issue and revoke certificates.
Affected versions of this package are vulnerable to Cryptographic Issue due to storing CA private keys in an insecure format.