Thales Cryptobox External Sharing Feature Brute-Force Vulnerability

A vulnerability in the external sharing feature of Thales Cryptobox allows an attacker to perform an offline brute-force attack on the access code linked to a sharing URL. By exploiting this vulnerability, information can be retrieved from the server to aid in the brute-force attempt.

Impact

Successful exploitation allows for an offline brute-force attack on the access code associated with a sharing link, potentially leading to unauthorized access to shared information.

Remediation

A fix for this vulnerability will be published soon.