ENC DataVault 7.1.1W and VaultAPI v67, which is currently... · CVE-2021-36750 · GitHub Advisory Database · GitHub

ENC DataVault 7.1.1W and VaultAPI v67, which is currently...

High severity Unreviewed Published Dec 23, 2021 to the GitHub Advisory Database • Updated Feb 3, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

ENC DataVault 7.1.1W and VaultAPI v67, which is currently being used in various other applications, mishandles key derivation, making it easier for attackers to determine the passwords of all DataVault users (across USB drives sold under multiple brand names).

References

Published by the National Vulnerability Database

Dec 22, 2021

Published to the GitHub Advisory Database Dec 23, 2021

Last updated Feb 3, 2023