3 ms·
How would you exploit this? What can you gain if you're already able to supply OpenSSL with a private key? Is there a way to supply or tamper with private keys
by Bootvis 11y ago
How would you exploit this? What can you gain if you're already able to supply OpenSSL with a private key? Is there a way to supply or tamper with private keys remotely?
- justinsaccount 11y agoI'm sure there is some PaaS type system that lets users upload their own keys.
- duaneb 11y agoI imagine you could exploit neighbors—if, for instance, a load balancer serves multiple clients and allows uploading private keys, this could allow snooping their traffic AS a client.