CVE-2020-1026

Name of the Vulnerable Software and Affected Versions MSR JavaScript Cryptography Library (affected versions not specified)

Description A security issue exists in the MSR JavaScript Cryptography Library due to multiple bugs in its Elliptic Curve Cryptography (ECC) implementation. This could allow an attacker to potentially learn information about a server's private ECC key or craft an invalid ECDSA signature that passes as valid. The issue is related to incorrect calculations in the ECC implementation, which could enable a remote attacker to gain unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.