CVE-2019-8919

N/A

Beschreibung

The seadroid (aka Seafile Android Client) application through 2.2.13 for Android always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks.

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht2/18/2019

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

seafile:seadroid

Schwachen (CWE)

CWE-330

Referenzen

https://github.com/haiwen/seadroid/issues/789(cve@mitre.org)

https://github.com/haiwen/seadroid/issues/789(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.