Vulnerability Details CVE-2022-2582
The AWS S3 Crypto SDK sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field. This hash can be used to brute force the plaintext, if the hash is readable to the attacker. AWS now blocks this metadata field, but older SDK versions still send it.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 15.4%
CVSS Severity
CVSS v3 Score 4.3
Products affected by CVE-2022-2582
-
cpe:2.3:a:amazon:aws_software_development_kit:-
-
cpe:2.3:a:amazon:aws_software_development_kit:1.23.0
-
cpe:2.3:a:amazon:aws_software_development_kit:1.23.1
-
cpe:2.3:a:amazon:aws_software_development_kit:1.23.10
-
cpe:2.3:a:amazon:aws_software_development_kit:1.23.11
-
cpe:2.3:a:amazon:aws_software_development_kit:1.23.12
-
cpe:2.3:a:amazon:aws_software_development_kit:1.23.13
-
cpe:2.3:a:amazon:aws_software_development_kit:1.23.14
-
cpe:2.3:a:amazon:aws_software_development_kit:1.23.15
-
cpe:2.3:a:amazon:aws_software_development_kit:1.23.16
-
cpe:2.3:a:amazon:aws_software_development_kit:1.23.17
-
cpe:2.3:a:amazon:aws_software_development_kit:1.23.18
-
cpe:2.3:a:amazon:aws_software_development_kit:1.23.19
-
cpe:2.3:a:amazon:aws_software_development_kit:1.23.2
-
cpe:2.3:a:amazon:aws_software_development_kit:1.23.20
-
cpe:2.3:a:amazon:aws_software_development_kit:1.23.21
-
cpe:2.3:a:amazon:aws_software_development_kit:1.23.22
-
cpe:2.3:a:amazon:aws_software_development_kit:1.23.3
-
cpe:2.3:a:amazon:aws_software_development_kit:1.23.4
-
cpe:2.3:a:amazon:aws_software_development_kit:1.23.5
-
cpe:2.3:a:amazon:aws_software_development_kit:1.23.6
-
cpe:2.3:a:amazon:aws_software_development_kit:1.23.7
-
cpe:2.3:a:amazon:aws_software_development_kit:1.23.8
-
cpe:2.3:a:amazon:aws_software_development_kit:1.23.9
-
cpe:2.3:a:amazon:aws_software_development_kit:1.24.0
-
cpe:2.3:a:amazon:aws_software_development_kit:1.24.1
-
cpe:2.3:a:amazon:aws_software_development_kit:1.24.2
-
cpe:2.3:a:amazon:aws_software_development_kit:1.24.3
-
cpe:2.3:a:amazon:aws_software_development_kit:1.24.4
-
cpe:2.3:a:amazon:aws_software_development_kit:1.24.5
-
cpe:2.3:a:amazon:aws_software_development_kit:1.24.6
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.0
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.1
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.10
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.11
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.12
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.13
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.14
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.15
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.16
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.17
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.18
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.19
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.2
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.20
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.21
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.22
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.23
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.24
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.25
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.26
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.27
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.28
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.29
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.3
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.30
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.31
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.32
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.33
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.34
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.35
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.36
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.37
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.38
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.39
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.4
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.40
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.41
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.42
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.43
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.44
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.45
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.46
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.47
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.48
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.49
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.5
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.50
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.6
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.7
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.8
-
cpe:2.3:a:amazon:aws_software_development_kit:1.25.9
-
cpe:2.3:a:amazon:aws_software_development_kit:1.26.0
-
cpe:2.3:a:amazon:aws_software_development_kit:1.26.1
-
cpe:2.3:a:amazon:aws_software_development_kit:1.26.2
-
cpe:2.3:a:amazon:aws_software_development_kit:1.26.3
-
cpe:2.3:a:amazon:aws_software_development_kit:1.26.4
-
cpe:2.3:a:amazon:aws_software_development_kit:1.26.5
-
cpe:2.3:a:amazon:aws_software_development_kit:1.26.6
-
cpe:2.3:a:amazon:aws_software_development_kit:1.26.7
-
cpe:2.3:a:amazon:aws_software_development_kit:1.26.8
-
cpe:2.3:a:amazon:aws_software_development_kit:1.27.0
-
cpe:2.3:a:amazon:aws_software_development_kit:1.27.1
-
cpe:2.3:a:amazon:aws_software_development_kit:1.27.2
-
cpe:2.3:a:amazon:aws_software_development_kit:1.27.3
-
cpe:2.3:a:amazon:aws_software_development_kit:1.27.4
-
cpe:2.3:a:amazon:aws_software_development_kit:1.28.0
-
cpe:2.3:a:amazon:aws_software_development_kit:1.28.1
-
cpe:2.3:a:amazon:aws_software_development_kit:1.28.10
-
cpe:2.3:a:amazon:aws_software_development_kit:1.28.11
-
cpe:2.3:a:amazon:aws_software_development_kit:1.28.12
-
cpe:2.3:a:amazon:aws_software_development_kit:1.28.13
-
cpe:2.3:a:amazon:aws_software_development_kit:1.28.14
-
cpe:2.3:a:amazon:aws_software_development_kit:1.28.2
-
cpe:2.3:a:amazon:aws_software_development_kit:1.28.3
-
cpe:2.3:a:amazon:aws_software_development_kit:1.28.4
-
cpe:2.3:a:amazon:aws_software_development_kit:1.28.5
-
cpe:2.3:a:amazon:aws_software_development_kit:1.28.6
-
cpe:2.3:a:amazon:aws_software_development_kit:1.28.7
-
cpe:2.3:a:amazon:aws_software_development_kit:1.28.8
-
cpe:2.3:a:amazon:aws_software_development_kit:1.28.9
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.0
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.1
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.10
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.11
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.12
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.13
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.14
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.15
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.16
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.17
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.18
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.19
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.2
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.20
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.21
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.22
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.23
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.24
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.25
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.26
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.27
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.28
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.29
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.3
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.30
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.31
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.32
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.33
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.34
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.4
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.5
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.6
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.7
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.8
-
cpe:2.3:a:amazon:aws_software_development_kit:1.29.9
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.0
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.1
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.10
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.11
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.12
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.13
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.14
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.15
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.16
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.17
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.18
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.19
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.2
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.20
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.21
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.22
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.23
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.24
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.25
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.26
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.27
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.28
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.29
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.3
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.4
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.5
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.6
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.7
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.8
-
cpe:2.3:a:amazon:aws_software_development_kit:1.30.9
-
cpe:2.3:a:amazon:aws_software_development_kit:1.31.0
-
cpe:2.3:a:amazon:aws_software_development_kit:1.31.1
-
cpe:2.3:a:amazon:aws_software_development_kit:1.31.10
-
cpe:2.3:a:amazon:aws_software_development_kit:1.31.11
-
cpe:2.3:a:amazon:aws_software_development_kit:1.31.12
-
cpe:2.3:a:amazon:aws_software_development_kit:1.31.13
-
cpe:2.3:a:amazon:aws_software_development_kit:1.31.14
-
cpe:2.3:a:amazon:aws_software_development_kit:1.31.15
-
cpe:2.3:a:amazon:aws_software_development_kit:1.31.2
-
cpe:2.3:a:amazon:aws_software_development_kit:1.31.3
-
cpe:2.3:a:amazon:aws_software_development_kit:1.31.4
-
cpe:2.3:a:amazon:aws_software_development_kit:1.31.5
-
cpe:2.3:a:amazon:aws_software_development_kit:1.31.6
-
cpe:2.3:a:amazon:aws_software_development_kit:1.31.7
-
cpe:2.3:a:amazon:aws_software_development_kit:1.31.8
-
cpe:2.3:a:amazon:aws_software_development_kit:1.31.9
-
cpe:2.3:a:amazon:aws_software_development_kit:1.32.0
-
cpe:2.3:a:amazon:aws_software_development_kit:1.32.1
-
cpe:2.3:a:amazon:aws_software_development_kit:1.32.10
-
cpe:2.3:a:amazon:aws_software_development_kit:1.32.11
-
cpe:2.3:a:amazon:aws_software_development_kit:1.32.12
-
cpe:2.3:a:amazon:aws_software_development_kit:1.32.13
-
cpe:2.3:a:amazon:aws_software_development_kit:1.32.2
-
cpe:2.3:a:amazon:aws_software_development_kit:1.32.3
-
cpe:2.3:a:amazon:aws_software_development_kit:1.32.4
-
cpe:2.3:a:amazon:aws_software_development_kit:1.32.5
-
cpe:2.3:a:amazon:aws_software_development_kit:1.32.6
-
cpe:2.3:a:amazon:aws_software_development_kit:1.32.7
-
cpe:2.3:a:amazon:aws_software_development_kit:1.32.8
-
cpe:2.3:a:amazon:aws_software_development_kit:1.32.9
-
cpe:2.3:a:amazon:aws_software_development_kit:1.33.0
-
cpe:2.3:a:amazon:aws_software_development_kit:1.33.1
-
cpe:2.3:a:amazon:aws_software_development_kit:1.33.10
-
cpe:2.3:a:amazon:aws_software_development_kit:1.33.11
-
cpe:2.3:a:amazon:aws_software_development_kit:1.33.12
-
cpe:2.3:a:amazon:aws_software_development_kit:1.33.13
-
cpe:2.3:a:amazon:aws_software_development_kit:1.33.14
-
cpe:2.3:a:amazon:aws_software_development_kit:1.33.15
-
cpe:2.3:a:amazon:aws_software_development_kit:1.33.16
-
cpe:2.3:a:amazon:aws_software_development_kit:1.33.17
-
cpe:2.3:a:amazon:aws_software_development_kit:1.33.18
-
cpe:2.3:a:amazon:aws_software_development_kit:1.33.19
-
cpe:2.3:a:amazon:aws_software_development_kit:1.33.2
-
cpe:2.3:a:amazon:aws_software_development_kit:1.33.20
-
cpe:2.3:a:amazon:aws_software_development_kit:1.33.21
-
cpe:2.3:a:amazon:aws_software_development_kit:1.33.3
-
cpe:2.3:a:amazon:aws_software_development_kit:1.33.4
-
cpe:2.3:a:amazon:aws_software_development_kit:1.33.5
-
cpe:2.3:a:amazon:aws_software_development_kit:1.33.6
-
cpe:2.3:a:amazon:aws_software_development_kit:1.33.7
-
cpe:2.3:a:amazon:aws_software_development_kit:1.33.8
-
cpe:2.3:a:amazon:aws_software_development_kit:1.33.9