Security Advisory
CVE-2024-41260
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A static initialization vector (IV) in the encrypt function of netbird managements service from v0.23.2 to v0.29.1 allows attackers to obtain sensitive information (email addresses) when in possession of the audit events database.