Description (CNA)
Improper verification of cryptographic signature and Improper Check for Unusual or Exceptional Conditions vulnerability in Estonian Information System Authority (RIA) libdigidocpp, DigiDoc4, DigiDoc on Android, and DigiDoc on iOS. This issue affects libdigidocpp: from 4.1.0 before 4.2.1; DigiDoc4: from 4.7.0 before 4.8.2; DigiDoc on Android: from 2.7.0 before 2.7.2; DigiDoc on iOS: from 2.8.0 before 2.8.1.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Estonian Information System Authority (RIA) / libdigidocpp | affected 4.1.0 before 4.2.1 |
| Estonian Information System Authority (RIA) / DigiDoc4 | affected 4.7.0 before 4.8.2 |
| Estonian Information System Authority (RIA) / DigiDoc | affected 2.7.0 before 2.7.2 |
| Estonian Information System Authority (RIA) / DigiDoc | affected 2.8.0 before 2.8.1 |
CWE
CWE-347, CWE-754
References
- https://github.com/open-eid/libdigidocpp/pull/690
- https://www.id.ee/en/article/ria-soovitab-kasutajatel-uuendada-id-tarkvara-eng/
- https://www.ria.ee/blogi/digidoc-rakendustes-esinenud-turvanorkus-mis-juhtus-ja-kuidas-see-parandati
ADP enrichment
No English description supplied.