CVE-2015-4082

CVE-2015-4082 (Attic) affects the Attic backup tool prior to 0.15. The issue is that backups may be unencrypted without user confirmation, allowing a user with read/write privileges on the encrypted repository to alter the manifest type byte to unencrypted, potentially exposing sensitive informat...