Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Weak encryption on Funambol's cloud server
Vulnerability Description
Vulnerability that allows a Padding Oracle Attack to be performed on the Funambol v30.0.0.20 cloud server. The thumbnail display URL allows an attacker to decrypt and encrypt the parameters used by the application to generate ‘self-signed’ access URLs.
CVSS Information
N/A
Vulnerability Type
依赖于未经完整性检查的安全相关输入的混淆或加密
Vulnerability Title
Funambol 安全漏洞
Vulnerability Description
Funambol是美国Funambol公司的一个数据同步框架。 Funambol v30.0.0.20版本存在安全漏洞，该漏洞源于缩略图显示URL允许攻击者解密和加密应用程序用于生成自签名访问URL的参数，可能导致Padding Oracle攻击。
CVSS Information
N/A
Vulnerability Type
N/A