PatchTheCVEjhu vulnerabilities
Recent CVEs affecting jhu products. 2 tracked.
jhu has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-07-30. Highest priority: CVE-2021-37588 (score 41/100).
- CVE-2021-37588 MEDIUM 5.9 DOWNGRADE In Charm 0.43, any two users can collude to achieve the ability to decrypt YCT14 data.
- CVE-2021-37587 MEDIUM 6.5 DOWNGRADE In Charm 0.43, any single user can decrypt DAC-MACS or MA-ABE-YJ14 data.
FAQ
How do I fix jhu vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jhu being exploited right now?
None of the tracked jhu CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jhu CVE should I patch first?
CVE-2021-37588 currently ranks highest (41/100): In Charm 0.43, any two users can collude to achieve the ability to decrypt YCT14 data..