CVE-2022-1279 Insecure EBICS messages encryption implementation in ebics-java/ebics-java-client could allow an adjacent attacker to decrypt EBICS payloads

A vulnerability in the encryption implementation of EBICS messages in the open source librairy ebics-java/ebics-java-client allows an attacker sniffing network traffic to decrypt EBICS payloads. This issue affects: ebics-java/ebics-java-client versions prior to 1.2...

CVE-2022-1279

Summary: CVE-2022-1279 describes a weakness in the encryption implementation of EBICS messages in the open-source library ebics-java/ebics-java-client, affecting versions prior to 1.2. The issue enables an attacker monitoring network traffic to decrypt EBICS payloads, indicating a confidentiality...