Information Disclosure

2023-01-0720:13:42

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

github

aws-sdk-go

vulnerability

plaintext

disclosure

software

metadata

hash

ciphertext

brute force

attacker

EPSS

0.001

Percentile

21.8%

JSON

github.com/aws/aws-sdk-go is vulnerable to information disclosure. The library sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field which could be used to brute force the plaintext, when the hash is readable to the attacker.