3 matches found
CVE-2022-45195
SimpleXMQ before 3.4.0, as used in SimpleX Chat before 4.2, does not apply a key derivation function to intended data, which can interfere with forward secrecy and can have other impacts if there is a compromise of a single private key. This occurs in the X3DH key exchange for the double ratchet...
5.3CVSS6.8AI score0.00599EPSS
SaveExploits1References1
CVE-2022-45195
CVE-2022-45195 affects SimpleXMQ <3.4.0 (used in SimpleX Chat
5.3CVSS5.2AI score0.00599EPSS
SaveExploits1References4Affected Software2
CVE-2022-45195
SimpleXMQ before 3.4.0, as used in SimpleX Chat before 4.2, does not apply a key derivation function to intended data, which can interfere with forward secrecy and can have other impacts if there is a compromise of a single private key. This occurs in the X3DH key exchange for the double ratchet...
5.3AI score0.00599EPSS
SaveExploits1References4
20