Skip to main content

Inadequate Encryption Strength

CVE-2021-37588

Medium
4.3/10

Summary

In Charm 0.43, any two users can collude to achieve the ability to decrypt YCT14 data.

  • MEDIUM
  • NETWORK
  • NONE
  • NONE
  • PARTIAL
  • NONE

CWE-326 - Inadequate Encryption Strength

The software stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References

Advisory Timeline

  • Published