CVE-2019-8919

The seadroid (aka Seafile Android Client) application through 2.2.13 for Android always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks.
References
Link Resource
https://github.com/haiwen/seadroid/issues/789 Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:seafile:seadroid:*:*:*:*:*:android:*:*

Information

Published : 2019-02-18 12:29

Updated : 2021-07-21 04:39


NVD link : CVE-2019-8919

Mitre link : CVE-2019-8919


JSON object : View

CWE
CWE-330

Use of Insufficiently Random Values

Advertisement

dedicated server usa

Products Affected

seafile

  • seadroid