CVE-2018-5261 | BDVDB-2026-95989 Detail

Description#

An issue was discovered in Flexense DiskBoss 8.8.16 and earlier. Due to the usage of plaintext information from the handshake as input for the encryption key used for the encryption of the rest of the session, the server and client disclose sensitive information, such as the authentication credentials, to any man-in-the-middle (MiTM) listener.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/bitsadmin/exploits/tree/master/CVE-2018-5261

Exploit#

No public exploit known

History#

Version 12018-02-02Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.