Lucene search
+L

2 matches found

OSV
OSV
added 2021/09/02 5:17 p.m.35 views

GHSA-VRMR-F2QH-3HHF Improper use of cryptographic key in wal-g

WAL-G before 1.1, when a non-libsodium build e.g., one of the official binary releases published as GitHub Releases is used, silently ignores the libsodium encryption key and uploads cleartext backups. This is arguably a Principle of Least Surprise violation because "the user likely wanted to...

7.5CVSS7.5AI score0.00834EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2021/08/12 4:15 p.m.6 views

CVE-2021-38599

WAL-G before 1.1, when a non-libsodium build e.g., one of the official binary releases published as GitHub Releases is used, silently ignores the libsodium encryption key and uploads cleartext backups. This is arguably a Principle of Least Surprise violation because "the user likely wanted to...

7.5CVSS7.1AI score0.00834EPSS
SaveExploits0References3
Rows per page
Query Builder