CVE-2013-7469: Weak Encryption
Seafile through 6.2.11 always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2013-7469.
What is the title of this vulnerability?
The title of this vulnerability is 'Seafile through 6.2.11 always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data'.
What is the severity of CVE-2013-7469?
The severity of CVE-2013-7469 is high, with a severity value of 7.5.
What software versions are affected by CVE-2013-7469?
Seafile versions up to and including 6.2.11 are affected by CVE-2013-7469.
How can an attacker exploit CVE-2013-7469?
An attacker can exploit CVE-2013-7469 by conducting chosen-plaintext attacks or dictionary attacks due to the predictable Initialization Vector (IV) used for encryption.