CVE-2019-13604

2019-07-1513:47:12

mitre

www.cve.org

5.6 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.3%

JSON

There is a short key vulnerability in HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader v24. The key for obfuscating the fingerprint image is vulnerable to brute-force attacks. This allows an attacker to recover the key and decrypt that image using the key. Successful exploitation causes a sensitive biometric information leak.