software.amazon.encryption.s3:amazon-s3-encryption-client-java
1 known vulnerabilities.
1 result · Feed
-
Medium 5.3
Amazon S3 Encryption Client for Java has a Key Commitment Issue
Missing cryptographic key commitment in the Amazon S3 Encryption Client for Java may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" ins…