CVE-2024-41260

A static initialization vector (IV) in the encrypt function of netbird management's service from v0.23.2 to v0.29.1 allows attackers to obtain sensitive…

High · published August 1, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
39.8
In the wild
Unconfirmed
What it is

A static initialization vector (IV) in the encrypt function of netbird management's service from v0.23.2 to v0.29.1 allows attackers to obtain sensitive information (email addresses) when in possession of the audit events database.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00471 · 39.8th percentile
Published
2024-08-01T00:00Z
EPSS history
Timeline
  • 01 AUG 00:00Z
    A static initialization vector (IV) in the encrypt function of netbird management's service from v0.23.2 to v0.29.1 allows attackers to obtain sensitive…
    cvelistv5