Lucene search
Veracode Vulnerability DatabaseVERACODE:25038HistoryApr 16, 2020 - 6:02 a.m.
Information Disclosure
2020-04-1606:02:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.0004 Low
EPSS
Percentile
12.7%
HaemmerElectronics.SeppPenner.WindowsHello is vulnerable to information disclosure. Text encrypted using the package that is written to a file can be decrypted by another executable by using the static method NCryptDecrypt from the same library.
| CPE | Name | Operator | Version |
|---|---|---|---|
| haemmerelectronics.sepppenner.windowshello | le | 1.0.3 |
Related
cve
cve
CVE-2020-11005
2020-04-14 23:15:12
nvd
nvd
CVE-2020-11005
2020-04-14 23:15:12
cvelist
cvelist
osv
osv
Internal NCryptDecrypt method could be used externally from WindowsHello library.
2020-04-14 23:09:13
CVE-2020-11005
2020-04-14 23:15:12
prion
prion
Authentication flaw
2020-04-14 23:15:00
github
github