Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3jcf-wh8c-cfcc

Опубликовано: 24 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.4

Описание

The Introduction Client in Briar through 1.5.3 does not implement out-of-band verification for the public keys of introducees. An introducer can launch man-in-the-middle attacks against later private communication between two introduced parties.

The Introduction Client in Briar through 1.5.3 does not implement out-of-band verification for the public keys of introducees. An introducer can launch man-in-the-middle attacks against later private communication between two introduced parties.

EPSS

Процентиль: 25%
0.00086
Низкий

7.4 High

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 7.4
nvd
больше 2 лет назад

The Introduction Client in Briar through 1.5.3 does not implement out-of-band verification for the public keys of introducees. An introducer can launch man-in-the-middle attacks against later private communication between two introduced parties.

CVSS3: 7.4
debian
больше 2 лет назад

The Introduction Client in Briar through 1.5.3 does not implement out- ...

EPSS

Процентиль: 25%
0.00086
Низкий

7.4 High

CVSS3

Дефекты

CWE-862