CVE-2024-41260

CVSS 7.5 HIGHEPSS 0.5%CWE-321

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.5EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

01 ago 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A static initialization vector (IV) in the encrypt function of netbird management's service from v0.23.2 to v0.29.1 allows attackers to obtain sensitive information (email addresses) when in possession of the audit events database.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Productos afectados

n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://gist.github.com/nyxfqq/92232108ac153e95d538bb17fc5ad636 https://github.com/github/advisory-database/pull/5714 https://github.com/netbirdio/netbird/pull/2569