#VU55420 Information disclosure in Charm - CVE-2021-37588

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU55420

#VU55420 Information disclosure in Charm - CVE-2021-37588

Published: July 29, 2021


Vulnerability identifier: #VU55420
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2021-37588
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
Charm
Software vendor:
JHU Security and Crypto Lab

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application. A remote attacker can decrypt YCT14 data and gain unauthorized access to sensitive information on the system.


Remediation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

External links