Approved changes feed: RSS · Atom

cpe:2.3:a:attic_project:attic:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAttic Project (96782ac4-7783-5fb3-9e8f-178aae590249)
ProductAttic (f964963d-53fc-5415-ac7e-c88142bbdc11)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jborg/attic purl2cpe 2026-06-01 10:11:49.462028
pkg:pypi/attic purl2cpe 2026-06-01 10:11:49.462032

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-4082 vulnerable 2026-06-08 05:06:39.162221 Details available
attic before 0.15 does not confirm unencrypted backups with the user, which allows remote attackers with read and write privileges for the encrypted repository to obtain potentially sensitive information by changing the manifest type byte of the repository to "unencrypted / without key file".
Published: 2017-08-18T16:00:00.000Z
Updated: 2024-08-06T06:04:02.636Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.