2 matches found
EVE Has Partially Predetermined Vault Key
Impact The deriveVaultKey function calls retrieveCloudKey which always returns "foobarfoobarfoobarfoobarfoobarfo". When merged with the randomly generated 32-byte key using mergeKeys 16 bytes from each, the last 16 bytes are always "arfoobarfoobarfo". This enables an attacker with physical access...
7.8CVSS7.2AI score0.00133EPSS
SaveExploits0References6Affected Software1
GHSA-G7VP-J25F-H34P EVE Has Partially Predetermined Vault Key
Impact The deriveVaultKey function calls retrieveCloudKey which always returns "foobarfoobarfoobarfoobarfoobarfo". When merged with the randomly generated 32-byte key using mergeKeys 16 bytes from each, the last 16 bytes are always "arfoobarfoobarfo". This enables an attacker with physical access...
6.7CVSS5.3AI score0.00133EPSS
SaveExploits0References6
20