AWS S3 Crypto SDK 加密问题漏洞

漏洞信息详情

AWS S3 Crypto SDK V2之前版本中存在加密问题漏洞。该漏洞源于网络系统或产品未正确使用相关密码算法，导致内容未正确加密、弱加密、明文存储敏感信息等。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://github.com/google/security-research/security/advisories/GHSA-7f33-f4f5-xwgw

来源:CONFIRM

链接:https://aws.amazon.com/blogs/developer/updates-to-the-amazon-s3-encryption-client/?s=09

来源:CONFIRM

链接:https://github.com/google/security-research/security/advisories/GHSA-7f33-f4f5-xwgw

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/164511/Red-Hat-Security-Advisory-2021-3851-01.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.3427

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2020-8912

暂无

暂无