CVE-2015-8013

s2k.js in OpenPGP.js will decrypt arbitrary messages regardless of passphrase for crafted PGP keys which allows remote attackers to bypass authentication if message decryption is used as an authentication mechanism via a crafted symmetrically encrypted PGP message.

• CWE-310

• http://www.openwall.com/lists/oss-security/2015/10/30/5Mailing List
• http://www.securityfocus.com/bid/77088Third Party Advisory, VDB Entry
• https://github.com/openpgpjs/openpgpjs/commit/668a9bbe7033f3f475576209305eb57a54306d29Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/10/30/5Mailing List
• http://www.securityfocus.com/bid/77088Third Party Advisory, VDB Entry
• https://github.com/openpgpjs/openpgpjs/commit/668a9bbe7033f3f475576209305eb57a54306d29Patch, Third Party Advisory

Published

Jul 25, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-8007The Echo extension for MediWiki does not properly implement …
• CVE-2015-8008The OAuth extension for MediaWiki improperly negotiates a ne…
• CVE-2015-8009The MWOAuthDataStore::lookup_token function in Extension:OAu…
• CVE-2015-8010Cross-site scripting (XSS) vulnerability in the Classic-UI w…
• CVE-2015-8011Buffer overflow in the lldp_decode function in daemon/protoc…9.8
• CVE-2015-8012lldpd before 0.8.0 allows remote attackers to cause a denial…7.5
• CVE-2015-8019The skb_copy_and_csum_datagram_iovec function in net/core/da…
• CVE-2015-8020Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain …
• CVE-2015-8021Incomplete blacklist vulnerability in the Configuration util…
• CVE-2015-8022The Configuration utility in F5 BIG-IP LTM, Analytics, APM, …
• CVE-2015-8023The server implementation of the EAP-MSCHAPv2 protocol in th…
• CVE-2015-8024McAfee Enterprise Security Manager (ESM), Enterprise Securit…