Vulnerability in Arg0 Encfs

CVE-2010-3074

SSL_Cipher.cpp in EncFS before 1.7.0 uses an improper combination of an AES cipher and a CBC cipher mode for encrypted filesystems, which allows local users to obtain sensitive information via a watermark attack.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.004 (31.3th percentile) — read the EPSS interpretation.

Affected products

  • Arg0 Encfs — versions 1.4.2, 1.4.0, 1.4.1.1
  • N/a — versions n/a

Weakness classification (CWE)

References