Lucene search
Veracode Vulnerability DatabaseVERACODE:27907HistoryNov 17, 2020 - 1:12 a.m.
In-band Protocol Negotiation And Robustness Weakness
2020-11-1701:12:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
31.5%
aws-encryption-sdk suffers from an In-band protocol negotiation and robustness weakness. The SDK allows a unique ciphertext to be decrypted into different results due to the non-committing property of AES-GCM, and other AEAD ciphers such as AES-GCM-SIV, or (X)ChaCha20Poly1305, when encrypting messages.
| CPE | Name | Operator | Version |
|---|---|---|---|
| aws-encryption-sdk-java | le | 1.7.0 | |
| aws-encryption-sdk | le | 1.7.1 | |
| @aws-crypto/client-node | le | 1.7.0 |
Related
osv
osv
CVE-2020-8897
2020-11-16 12:15:14
PYSEC-2020-261
2020-11-16 12:15:00
github
github
prion
prion
Design/Logic Flaw
2020-11-16 12:15:00
nvd
nvd
CVE-2020-8897
2020-11-16 12:15:14
gitlab
gitlab
Use of a Broken or Risky Cryptographic Algorithm
2021-10-12 00:00:00
cvelist
cvelist
CVE-2020-8897 Robustness weakness in AWS KMS and Encryption SDKs
2020-11-16 11:55:11
cve
cve
CVE-2020-8897
2020-11-16 12:15:14