Search vulnerabilities

Results 1

Export CSV
CVE-2017-17689

S/MIME: CBC gadget attacks allows to exfiltrate plaintext out of encrypted emails

The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.

CVSS 3.0 · 5.9 Medium EPSS 4.1% KEV · Not listed
Vendors
9folders Apple Bloop and 13 more
Products
Nine Mail Airmail and 14 more