Skip to content
OpenAdvisories

Product · SeppPenner

WindowsHello

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.1

    Internal NCryptDecrypt method could be used externally from WindowsHello library.

    The WindowsHello open source library (NuGet HaemmerElectronics.SeppPenner.WindowsHello), before version 1.0.4, has a vulnerability where encrypted data could potentially be decrypted without needing authentication. If the library is used to encrypt text and w…