CVE-2019-8919

Published: Feb 18, 2019Modified: Jun 17, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The seadroid (aka Seafile Android Client) application through 2.2.13 for Android always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks.

Affected (1)

Products: Seafile: Seadroid

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Seafile Seadroid	Up to 2.2.13

Related CWEs

Use of Insufficiently Random Values

The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

References (2)

https://github.com/haiwen/seadroid/issues/789

Source: cve@mitre.org

Third Party Advisory

https://github.com/haiwen/seadroid/issues/789

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.