CVE-2018-5261

8.1 highEPSS 0.5%

An issue was discovered in Flexense DiskBoss 8.8.16 and earlier. Due to the usage of plaintext information from the handshake as input for the encryption key used for the encryption of the rest of the session, the server and client disclose sensitive information, such as the authentication credentials, to any man-in-the-middle (MiTM) listener.

Severity

CVSS 3.0

8.1 high

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWE: CWE-311
Published: 2018-02-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

flexense:diskboss

References

https://github.com/bitsadmin/exploits/tree/master/CVE-2018-5261
https://github.com/bitsadmin/exploits/tree/master/CVE-2018-5261

Check your stack JSON