← Database

CVE-2010-3074

LOW CVSS: 2.1 Published: 2010-09-17 Modified: 2026-06-16

Description

SSL_Cipher.cpp in EncFS before 1.7.0 uses an improper combination of an AES cipher and a CBC cipher mode for encrypted filesystems, which allows local users to obtain sensitive information via a watermark attack.

Affected Platforms

Arg0 Encfs

Weakness Type

CWE-310

References