2 matches found
Information disclosure
Due to the implementation of "deriveVaultKey", prior to version 7.10, the generated vault key would always have the last 16 bytes predetermined to be "arfoobarfoobarfo". This issue happens because "deriveVaultKey" calls "retrieveCloudKey" which will always return "foobarfoobarfoobarfoobarfoobarfo...
4.3CVSS7.6AI score0.00133EPSS
SaveExploits0References1Affected Software1
20