2 matches found
GO-2026-4436 EVE Has Partially Predetermined Vault Key in github.com/lf-edge/eve
EVE Has Partially Predetermined Vault Key in github.com/lf-edge/eve...
CVE-2023-43637 Vault Key Partially Predetermined
Due to the implementation of "deriveVaultKey", prior to version 7.10, the generated vault key would always have the last 16 bytes predetermined to be "arfoobarfoobarfo". This issue happens because "deriveVaultKey" calls "retrieveCloudKey" which will always return "foobarfoobarfoobarfoobarfoobarfo...