Aws S3 Crypto Sdk

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-8912 Go LOW POC PATCH Monitor

A vulnerability in the in-band key negotiation exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. Rated low severity (CVSS 2.5). Public exploit code available and no vendor patch available.

Oracle Information Disclosure Aws S3 Crypto Sdk

NVD GitHub

CVSS 3.1

2.5

EPSS

0.2%

CVE-2020-8911 Go MEDIUM POC PATCH This Month

A padding oracle vulnerability exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. Rated medium severity (CVSS 5.6). Public exploit code available and no vendor patch available.

Oracle Information Disclosure Aws S3 Crypto Sdk

NVD GitHub

CVSS 3.1

5.6

EPSS

0.3%

CVE-2020-8912 Go

EPSS 0% CVSS 2.5

LOW POC PATCH Monitor

Oracle Information Disclosure Aws S3 Crypto Sdk

NVD GitHub

CVE-2020-8911 Go

EPSS 0% CVSS 5.6

MEDIUM POC PATCH This Month

A padding oracle vulnerability exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. Rated medium severity (CVSS 5.6). Public exploit code available and no vendor patch available.

Oracle Information Disclosure Aws S3 Crypto Sdk

NVD GitHub