CVE-2015-4082

attic before 0.15 does not confirm unencrypted backups with the user, which allows remote attackers with read and write privileges for the encrypted repository…

published August 18, 2017

CVSS
—
EPSS
2%
Percentile
84.4
In the wild
Unconfirmed
What it is

attic before 0.15 does not confirm unencrypted backups with the user, which allows remote attackers with read and write privileges for the encrypted repository to obtain potentially sensitive information by changing the manifest type byte of the repository to "unencrypted / without key file".

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02486 · 84.4th percentile
Published
2017-08-18T16:00Z
EPSS history
Timeline
  • 18 AUG 16:00Z
    attic before 0.15 does not confirm unencrypted backups with the user, which allows remote attackers with read and write privileges for the encrypted repository…
    cvelistv5