Medium severity6.5NVD Advisory· Published Aug 18, 2017· Updated Jun 17, 2026
CVE-2015-4082
CVE-2015-4082
Description
attic before 0.15 does not confirm unencrypted backups with the user, which allows remote attackers with read and write privileges for the encrypted repository to obtain potentially sensitive information by changing the manifest type byte of the repository to "unencrypted / without key file".
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
atticPyPI | < 0.15 | 0.15 |
Affected products
2Patches
Vulnerability mechanics
References
8- github.com/jborg/attic/issues/271nvdExploitThird Party AdvisoryWEB
- www.openwall.com/lists/oss-security/2015/05/31/3nvdMailing ListThird Party AdvisoryWEB
- www.securityfocus.com/bid/74821nvdThird Party AdvisoryVDB EntryWEB
- github.com/advisories/GHSA-5x6q-ffwj-8vcfghsaADVISORY
- github.com/jborg/attic/commit/78f9ad1faba7193ca7f0acccbc13b1ff6ebf9072nvdThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2015-4082ghsaADVISORY
- github.com/pypa/advisory-database/tree/main/vulns/attic/PYSEC-2017-6.yamlghsaWEB
- web.archive.org/web/20200517225455/http://www.securityfocus.com/bid/74821ghsaWEB
News mentions
0No linked articles in our index yet.