A static initialization vector (IV) in the encrypt function of netbird v0.28.4 allows attackers to obtain sensitive information.
Metrics
Affected Vendors & Products
References
History
Tue, 06 Aug 2024 19:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Netbirdio
Netbirdio netbird |
|
Weaknesses | CWE-321 | |
CPEs | cpe:2.3:a:netbirdio:netbird:0.28.4:*:*:*:*:*:*:* | |
Vendors & Products |
Netbirdio
Netbirdio netbird |
|
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2024-08-01T00:00:00
Updated: 2024-08-06T18:16:11.358Z
Reserved: 2024-07-18T00:00:00
Link: CVE-2024-41260
Vulnrichment
Updated: 2024-08-06T18:09:49.019Z
NVD
Status : Undergoing Analysis
Published: 2024-08-01T16:15:06.453
Modified: 2024-08-06T19:35:08.443
Link: CVE-2024-41260
Redhat
No data.