CVE-2019-8919: High severity seafile vulnerability
The seadroid (aka Seafile Android Client) application through 2.2.13 for Android always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2019-8919.
What is the title of this vulnerability?
The title of this vulnerability is 'The seadroid (aka Seafile Android Client) application through 2.2.13 for Android always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks.'
What is the severity of CVE-2019-8919?
The severity of CVE-2019-8919 is high with a CVSS score of 7.5.
What software does CVE-2019-8919 affect?
CVE-2019-8919 affects the seadroid (aka Seafile Android Client) application version 2.2.13 for Android.
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by conducting chosen-plaintext attacks or dictionary attacks on the encrypted private data.