The S/MIME specification allows a Cipher Block Chaining CBC malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL...
5.9CVSS6.2AI score0.04166EPSS
SaveExploits2References10
OSV•added 2018/05/16 7:29 p.m.•5 views
DEBIAN-CVE-2017-17689
The S/MIME specification allows a Cipher Block Chaining CBC malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL...