CVE-2021-36750

ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users across USB drives sold under multiple brand names...

CVE-2021-36750

Summary: CVE-2021-36750 affects ENC DataVault prior to 7.2 and VaultAPI v67, where a faulty key derivation process is reported. The described vulnerability enables attackers to determine the passwords of all DataVault users across USB drives branded by multiple vendors. The root cause is describe...

CVE-2021-36750

ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users across USB drives sold under multiple brand names...

CVE-2021-36750: Improper Restriction of Excessive Authentication Attempts

ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users across USB drives sold under multiple brand names...

PT-2021-21336

Name of the Vulnerable Software and Affected Versions ENC DataVault versions prior to 7.2 VaultAPI version v67 Description The issue is related to the mishandling of key derivation, which makes it easier for attackers to determine the passwords of all DataVault users. This affects DataVault users...