Beveiligingsadvies

CVE-2016-6225

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-03-23 16:00:00

Laatst bijgewerkt 2024-08-06 01:22:20

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which makes it easier for context-dependent attackers to obtain sensitive information from encrypted backup files via a Chosen-Plaintext attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6394.

← Alle CVE's bekijken Bekijk op cve.org ↗