Skip to content

Secret Threshold option ignored

Moderate
ChrisMacNaughton published GHSA-v3mc-9hrx-jgxq Jan 24, 2020

Package

cargo shamir (cargo)

Affected versions

< 2.0.0

Patched versions

2.0.0

Description

Impact

Secret threshold was incorrectly always limited to three, rather than user configured amoutns

Patches

This has been resolved in version 2.0.0 of the published Shamir crate

Workarounds

None

References

For more information

If you have any questions or comments about this advisory:

Severity

Moderate

CVE ID

No known CVE

Weaknesses

No CWEs