CVE-2024-56141

Name of the Vulnerable Software and Affected Versions Minosoft (affected versions supporting Minecraft protocol 1.7 and later)

Description The CryptManager encryption routine in CryptManager.kt initializes its AES cipher using an initialization vector (IV) that is set equal to the secret key instead of a random value. This implementation flaw allows an attacker to recover the secret key through chosen-ciphertext or chosen-plaintext attacks by submitting specific messages for encryption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.