CVE-2020-10256

Name of the Vulnerable Software and Affected Versions 1Password command-line tool versions prior to 0.5.5 1Password SCIM bridge versions prior to 0.7.3

Description An issue was discovered where an insecure random number generator was used to generate various keys. This could allow an attacker with access to the user's encrypted data to perform brute-force calculations of encryption keys, potentially succeeding at decryption.

Recommendations For 1Password command-line tool versions prior to 0.5.5, update to version 0.5.5 or later. For 1Password SCIM bridge versions prior to 0.7.3, update to version 0.7.3 or later.