Lucene search
GoogleOSV:GHSA-QMVQ-F3FJ-M3WGHistoryMay 17, 2022 - 2:15 a.m.
OpenPGP 1.2.0 and earlier decrypts arbitrary messages
2022-05-1702:15:35
Google
osv.dev
5
0.002 Low
EPSS
Percentile
65.1%
s2k.js in OpenPGP.js will decrypt arbitrary messages regardless of passphrase for crafted PGP keys which allows remote attackers to bypass authentication if message decryption is used as an authentication mechanism via a crafted symmetrically encrypted PGP message.
Related
cve
cve
CVE-2015-8013
2017-07-25 18:29:00
prion
prion
Authentication flaw
2017-07-25 18:29:00
nvd
nvd
CVE-2015-8013
2017-07-25 18:29:00
cvelist
cvelist
CVE-2015-8013
2017-07-25 18:00:00
veracode
veracode
Authentication Bypass
2017-07-25 21:39:29
github
github
OpenPGP 1.2.0 and earlier decrypts arbitrary messages
2022-05-17 02:15:35