CVE-2019-8919
Last modified
CVE-2019-8919 is a vulnerability of currently unknown severity. The seadroid (aka Seafile Android Client) application through 2.2.13 for Android always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks.. EPSS estimates a 1.44% chance of exploitation in the next 30 days.
Description
The seadroid (aka Seafile Android Client) application through 2.2.13 for Android always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Seafile | Seadroid | <= 2.2.13 |
References
- https://github.com/haiwen/seadroid/issues/789Third Party Advisory
- https://github.com/haiwen/seadroid/issues/789Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-8919?
How severe is CVE-2019-8919?
How do I fix CVE-2019-8919?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-8908An issue was discovered in WTCMS 1.0. It allows remote attac…
- CVE-2019-8909An issue was discovered in WTCMS 1.0. It allows remote attac…
- CVE-2019-8910An issue was discovered in WTCMS 1.0. It allows index.php?g=…
- CVE-2019-8911An issue was discovered in WTCMS 1.0. It has stored XSS via …
- CVE-2019-8912In the Linux kernel through 4.20.11, af_alg_release() in cry…7.8
- CVE-2019-8917SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remot…
- CVE-2019-8920iart.php in XAMPP 1.7.0 has XSS, a related issue to CVE-2008…
- CVE-2019-8921An issue was discovered in bluetoothd in BlueZ through 5.48.…6.5
- CVE-2019-8922A heap-based buffer overflow was discovered in bluetoothd in…8.8
- CVE-2019-8923XAMPP through 5.6.8 and previous allows SQL injection via th…
- CVE-2019-8924XAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpre…
- CVE-2019-8925An issue was discovered in Zoho ManageEngine Netflow Analyze…
Are you affected by CVE-2019-8919?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST