| Package | Affected versions | Patched versions |
|---|---|---|
| encfs | = 1.4.0= 1.4.1= 1.4.1.1= 1.4.2= 1.5.0≤ 1.6.0 |
SSL_Cipher.cpp in EncFS before 1.7.0 uses an improper combination of an AES cipher and a CBC cipher mode for encrypted filesystems, which allows local users to obtain sensitive information via a watermark attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free