CVE-2024-41260

A static initialization vector IV in the encrypt function of netbird management's service from v0.23.2 to v0.29.1 allows attackers to obtain sensitive information email addresses when in possession of the audit events database...

CVE-2024-41260

A static initialization vector IV in the encrypt function of netbird management's service from v0.23.2 to v0.29.1 allows attackers to obtain sensitive information email addresses when in possession of the audit events database...

CVE-2024-41260

The NetBird management service (versions v0.23.2 to v0.29.1 ) is vulnerable to Ciphertext Leakage due to the use of a static initialization vector (IV) within the encrypt function of the crypt.go file. If an attacker gains possession of the audit events database , they can exploit this predictabl...