CVE-2019-8919

2019-02-1820:29:00

Google

osv.dev

AI Score

6.9

Confidence

Low

EPSS

0.002

Percentile

53.8%

JSON

The seadroid (aka Seafile Android Client) application through 2.2.13 for Android always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks.

References

github.com/haiwen/seadroid/issues/789