Vulnerability Description
A static initialization vector (IV) in the encrypt function of netbird management's service from v0.23.2 to v0.29.1 allows attackers to obtain sensitive information (email addresses) when in possession of the audit events database.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://gist.github.com/nyxfqq/92232108ac153e95d538bb17fc5ad636
- https://github.com/github/advisory-database/pull/5714
- https://github.com/netbirdio/netbird/pull/2569
FAQ
What is CVE-2024-41260?
CVE-2024-41260 is a vulnerability with a CVSS score of 7.5 (HIGH). A static initialization vector (IV) in the encrypt function of netbird management's service from v0.23.2 to v0.29.1 allows attackers to obtain sensitive information (email addresses) when in possessio...
How severe is CVE-2024-41260?
CVE-2024-41260 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-41260?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.