Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:27613
HistoryOct 19, 2020 - 2:00 a.m.

Malleable Ciphertext

2020-10-1902:00:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.001 Low

EPSS

Percentile

23.5%

tink has a ciphertext malleability issue. The vulnerability exists due to storing of the ciphertext prefix in a hashmap keyed by a UTF8 encoded string instead of using byte arrays, allowing the retrieval of keys with IDs of invalid Unicode strings with a changed ID.

CPENameOperatorVersion
tink cryptography apile1.4.0

0.001 Low

EPSS

Percentile

23.5%

Related for VERACODE:27613