Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cgrChainguardCHAINGUARD:CVE-2020-8912
HistoryMay 13, 2024 - 9:06 a.m.

CVE-2020-8912 vulnerabilities

2024-05-1309:06:52
Chainguard
packages.cgr.dev
4
vulnerabilities
packages
k3d

2.5 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

7.3 High

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

12.2%

JSON

Vulnerabilities for packages: k3d

CPENameOperatorVersion
k3dle5.6.0-r11

Related

wolfi 1
redhatcve 1
github 3
prion 1
ibm 3
cvelist 1
cve 1
veracode 1
gitlab 1
osv 4
redhat 1
wolfi
wolfi
CVE-2020-8912 vulnerabilities
2024-05-13 09:06:53
redhatcve
redhatcve
CVE-2020-8912
2020-08-18 19:29:55
github
github
In-band key negotiation issue in AWS S3 Crypto SDK for golang
2022-02-11 23:23:13
CBC padding oracle issue in AWS S3 Crypto SDK for golang
2022-02-11 23:26:26
Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library
2022-07-13 00:00:39
prion
prion
Authentication flaw
2020-08-11 20:15:00
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a security restrictions bypass in Amazon AWS S3 Crypto SDK for GoLang (CVE-2020-8912)
2023-03-31 16:44:15
Security Bulletin: Netcool Operations Insight v1.6.7 contains fixes for multiple security vulnerabilities.
2022-12-15 09:13:44
Security Bulletin: Multiple Vulnerabilities in CloudPak for AIOps
2024-01-31 19:31:55
cvelist
cvelist
In-band key negotiation issue in AWS S3 Crypto SDK for GoLang
2020-08-11 19:20:14
cve
cve
CVE-2020-8912
2020-08-11 20:15:00
veracode
veracode
Insecure Cryptography
2022-02-14 11:17:47
gitlab
gitlab
Use of a Broken or Risky Cryptographic Algorithm
2022-02-11 00:00:00
osv
osv
Use of risky cryptographic algorithm in github.com/aws/aws-sdk-go
2022-02-11 23:26:26
In-band key negotiation issue in AWS S3 Crypto SDK for golang
2022-02-11 23:23:13
CBC padding oracle issue in AWS S3 Crypto SDK for golang
2022-02-11 23:26:26
redhat
redhat
(RHSA-2021:3851) Important: Red Hat 3scale API Management 2.11.0 Release - Container Images
2021-10-14 05:55:21

2.5 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

7.3 High

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

12.2%

JSON
Related for CHAINGUARD:CVE-2020-8912
wolfi1redhatcve1github3prion1ibm3cvelist1cve1veracode1gitlab1osv4redhat1