Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Introduction Client in Briar through 1.5.3 does not implement out-of-band verification for the public keys of introducees. An introducer can launch man-in-the-middle attacks against later private communication between two introduced parties.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Briar 安全漏洞
Vulnerability Description
Briar是Briar开源的一种开源软件通信技术。旨在提供安全且有弹性的点对点通信,其运作无需中心服务器并最大限度地减少对外部的依赖。 Briar 1.5.3 之前版本存在安全漏洞,该漏洞源于Introduction Client 没有对被介绍人的公钥进行验证,介绍人可以对两个被介绍方之间以后的私人通信发起中间人攻击。
CVSS Information
N/A
Vulnerability Type
N/A