Aws S3 Crypto Sdk (Amazon) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2020-08-11. Vendor: Amazon.

CVEs of Aws S3 Crypto Sdk

• CVE-2020-8911 - CVSS 5.6 (medium), 2020-08-11: A padding oracle vulnerability exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. The SDK allows users to encrypt files with AES-CBC without…
• CVE-2020-8912 - CVSS 2.5 (low), 2020-08-11: A vulnerability in the in-band key negotiation exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. An attacker with write access to the targeted…