CVE-2015-4082

Name of the Vulnerable Software and Affected Versions attic versions prior to 0.15

Description The issue allows remote attackers with read and write privileges for the encrypted repository to obtain potentially sensitive information by modifying the manifest type byte of the repository to indicate it is unencrypted. This is possible because the software does not confirm unencrypted backups with the user.

Recommendations For versions prior to 0.15, update to version 0.15 or later to resolve the issue.