CVE-2020-11005 MEDIUM

CVE-2020-11005: Internal NCryptDecrypt method could be used externally from WindowsHello library.

Vendor Sepppenner
Product WindowsHello
Weakness CWE-288
Published April 14, 2020
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

5.1/10
Attack vector Local
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

The WindowsHello open source library (NuGet HaemmerElectronics.SeppPenner.WindowsHello), before version 1.0.4, has a vulnerability where encrypted data could potentially be decrypted without needing authentication. If the library is used to encrypt text and write the output to a txt file, another executable could be able to decrypt the text using the static method NCryptDecrypt from this same library without the need to use Windows Hello Authentication again. This has been patched in version 1.0.4.

Key dates

02Disclosure timeline

April 14, 2020 CVE published
August 4, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-12225 syracom Secure Login (2FA) for Confluence allows 2FA bypass via spoofed User-Agent CVE-2026-35090 Authentication Bypass in Slican telephone exchanges CVE-2026-42749 WordPress Disable Comments for Any Post Types (Remove comments) plugin <= 1.3.0 - Broken Authentication vulnerability CVE-2026-49062 WordPress Faust.js plugin <= 1.8.7 - Broken Authentication vulnerability CVE-2026-40780 WordPress BookIt plugin < 2.5.4.1 - Broken Authentication vulnerability