Lucene search
+L

1 matches found

OSV
OSV
added 2023/09/21 1:20 p.m.9 views

CVE-2023-43637 Vault Key Partially Predetermined

Due to the implementation of "deriveVaultKey", prior to version 7.10, the generated vault key would always have the last 16 bytes predetermined to be "arfoobarfoobarfo". This issue happens because "deriveVaultKey" calls "retrieveCloudKey" which will always return "foobarfoobarfoobarfoobarfoobarfo...

7.8CVSS7AI score
SaveExploits0References4
Rows per page
Query Builder