CVEvulnerability

CVE-2019-8919

7.5 HIGH Published 2019-02-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-02-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-330

Description

The seadroid (aka Seafile Android Client) application through 2.2.13 for Android always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks.

Affected configurations

• seafile seadroid (<= 2.2.13)

Related

Weakness · CWE (1)

  • CWE-330 Use of Insufficiently Random Values weakness

References