Use of a Broken or Risky Cryptographic Algorithm in gnuboard/gnuboard5
CVE-2022-1252

9.1CRITICAL

Key Information:

Vendor

Gnuboard

Status
Gnuboard/gnuboard5
Vendor
CVE Published:
11 April 2022

What is CVE-2022-1252?

Use of a Broken or Risky Cryptographic Algorithm in GitHub repository gnuboard/gnuboard5 prior to and including 5.5.5. A vulnerability in gnuboard v5.5.5 and below uses weak encryption algorithms leading to sensitive information exposure. This allows an attacker to derive the email address of any user, including when the 'Let others see my information.' box is ticked off. Or to send emails to any email address, with full control of its contents

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

gnuboard/gnuboard5 <= 5.5.5

References

https://huntr.dev/bounties/c8c2c3e1-67d0-4a11-a4d4-11af56...
x_refsource_CONFIRM
https://0g.vc/posts/insecure-cipher-gnuboard5/
x_refsource_MISC

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.