Lucene search
+L

2 matches found

Prion
Prion
added 2023/09/21 2:15 p.m.14 views

Information disclosure

Due to the implementation of "deriveVaultKey", prior to version 7.10, the generated vault key would always have the last 16 bytes predetermined to be "arfoobarfoobarfo". This issue happens because "deriveVaultKey" calls "retrieveCloudKey" which will always return "foobarfoobarfoobarfoobarfoobarfo...

4.3CVSS7.6AI score0.00134EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/09/21 1:20 p.m.31 views

CVE-2023-43637 Vault Key Partially Predetermined

Due to the implementation of "deriveVaultKey", prior to version 7.10, the generated vault key would always have the last 16 bytes predetermined to be "arfoobarfoobarfo". This issue happens because "deriveVaultKey" calls "retrieveCloudKey" which will always return "foobarfoobarfoobarfoobarfoobarfo...

7.8CVSS7.8AI score0.00134EPSS
SaveExploits0References1
Rows per page
Query Builder