CVE-2026-15638:详情

CVE-2026-15638

2026-09-16
00h17 +00:00
A02-Cryptographic Failures
2026-09-18
19h34 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

An unauthenticated user with access to Secret Server could leverage a padding oracle to decrypt or encrypt data using one of the server's cryptographic keys. The key itself is not exposed.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.

参考资料