EUVD-2020-4212

Malware in sbrugna...

Session fixation

The Cloud Functions subsystem in OpenTrace 1.0 might allow fabrication attacks by making billions of TempID requests before an AES-256-GCM key rotation occurs...

CVE-2020-11872

The CVE-2020-11872 entry concerns the Cloud Functions subsystem in OpenTrace 1.0. The vulnerability arises from fabrications possible by issuing billions of TempID requests before an AES-256-GCM key rotation, as described in the provided documents. The connected records consistently reference the...

PT-2020-12907

Name of the Vulnerable Software and Affected Versions OpenTrace version 1.0 Description The issue in OpenTrace's Cloud Functions subsystem could potentially allow fabrication attacks. This is possible by making a large number of TempID requests before the rotation of an AES-256-GCM key occurs...

CVE-2020-11872: Use of a Broken or Risky Cryptographic Algorithm

The Cloud Functions subsystem in OpenTrace 1.0 might allow fabrication attacks by making billions of TempID requests before an AES-256-GCM key rotation occurs...