Lucene search
+L

2 matches found

OSV
OSV
added 2026/02/17 6:9 p.m.4 views

GO-2026-4436 EVE Has Partially Predetermined Vault Key in github.com/lf-edge/eve

EVE Has Partially Predetermined Vault Key in github.com/lf-edge/eve...

7.8CVSS5.4AI score0.00134EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2023/09/21 1:20 p.m.32 views

CVE-2023-43637 Vault Key Partially Predetermined

Due to the implementation of "deriveVaultKey", prior to version 7.10, the generated vault key would always have the last 16 bytes predetermined to be "arfoobarfoobarfo". This issue happens because "deriveVaultKey" calls "retrieveCloudKey" which will always return "foobarfoobarfoobarfoobarfoobarfo...

7.8CVSS7.8AI score0.00134EPSS
SaveExploits0References1
Rows per page
Query Builder