Количество 3
Количество 3
CVE-2015-8013
s2k.js in OpenPGP.js will decrypt arbitrary messages regardless of passphrase for crafted PGP keys which allows remote attackers to bypass authentication if message decryption is used as an authentication mechanism via a crafted symmetrically encrypted PGP message.
CVE-2015-8013
s2k.js in OpenPGP.js will decrypt arbitrary messages regardless of pas ...
GHSA-qmvq-f3fj-m3wg
OpenPGP 1.2.0 and earlier decrypts arbitrary messages
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2015-8013 s2k.js in OpenPGP.js will decrypt arbitrary messages regardless of passphrase for crafted PGP keys which allows remote attackers to bypass authentication if message decryption is used as an authentication mechanism via a crafted symmetrically encrypted PGP message. | CVSS3: 7.5 | 1% Низкий | больше 8 лет назад | |
CVE-2015-8013 s2k.js in OpenPGP.js will decrypt arbitrary messages regardless of pas ... | CVSS3: 7.5 | 1% Низкий | больше 8 лет назад | |
GHSA-qmvq-f3fj-m3wg OpenPGP 1.2.0 and earlier decrypts arbitrary messages | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
Уязвимостей на страницу