VULNERABILITY INTELLIGENCE
CVE-2024-41260
CVSS score7.5 HIGH
EPSS probability0.47%
CISA KEVNot currently listed
Published2024-08-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
A static initialization vector (IV) in the encrypt function of netbird management's service from v0.23.2 to v0.29.1 allows attackers to obtain sensitive information (email addresses) when in possession of the audit events database.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-321