CVE Catalog
CVE-2022-0664
CriticalSummary
In versions prior to 0.8.5, 0.9.4, 0.10.0, and 0.10.1 of the Go library github.com/gravitl/netmaker, a hard-coded cryptographic key was used.
Risk Assessment
The use of a hard-coded cryptographic key may lead to security compromises, allowing attackers to decrypt data or gain access to the system.
Recommendation
It is recommended to upgrade to versions 0.8.5, 0.9.4, 0.10.0, or 0.10.1 to mitigate this vulnerability.
Original NVD description (English source)
Use of Hard-coded Cryptographic Key in Go github.com/gravitl/netmaker prior to 0.8.5,0.9.4,0.10.0,0.10.1.