A vulnerability in the encryption implementation of EBICS messages in the open source librairy ebics-java/ebics-java-client allows an attacker sniffing network traffic to decrypt EBICS payloads.
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.00368·Published 2022-04-14·Fixed in 1.2CWE-325
