[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fq1VekG7zvZD1Agf8n2D4MNIfi1tjw75GSBnakBDU3uI":3,"g5a-risk:CVE-2022-2582":111},{"success":4,"data":5,"meta":108},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":36,"affectedProducts":37,"affectedProductsCount":43,"references":44,"referencesCount":60,"weaknesses":61,"weaknessesCount":43,"isActivelyExploited":70,"cisaInfo":26,"otxData":26,"relatedBlogPosts":71,"seoMetadata":72,"configurations":97,"relatedVendorCves":106,"notableEvents":107},"CVE-2022-2582","What is CVE-2022-2582?","The AWS S3 Crypto SDK sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field. This hash can be used to brute force the plaintext, if the hash is readable to the attacker. AWS now blocks this metadata field, but older SDK versions still send it.","The AWS S3 Crypto SDK sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field. This hash can be used to brute force the plain...","2022-12-27T22:15:12.39","2025-04-11T17:15:36.213",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,2.8,1.4,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.00514,[35,35,35,35,35,35,33],0.00495,"Medium",[38],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"amazon","aws_software_development_kit","*","cpe:2.3:a:amazon:aws_software_development_kit:*:*:*:*:*:go:*:*",1,[45,51,56,58],{"url":46,"source":47,"tags":48},"https:\u002F\u002Fgithub.com\u002Faws\u002Faws-sdk-go\u002Fcommit\u002F35fa6ddf45c061e0f08d3a3b5119f8f4da38f6d1","GitHub",[49,50],"Patch","Third Party Advisory",{"url":52,"source":53,"tags":54},"https:\u002F\u002Fpkg.go.dev\u002Fvuln\u002FGO-2022-0391","Go",[55,49,50],"Exploit",{"url":46,"source":47,"tags":57},[49,50],{"url":52,"source":53,"tags":59},[55,49,50],4,[62],{"id":63,"name":64,"description":65,"extendedDescription":66,"status":67,"abstraction":68,"structure":69},"CWE-326","Inadequate Encryption Strength","The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.","A weak encryption scheme can be subjected to brute force attacks that have a reasonable chance of succeeding using current attack methods and resources.","Draft","Class","Simple",false,[],{"title":73,"metaDescription":74,"keywords":75,"canonicalUrl":76,"structuredData":77},"What is CVE-2022-2582? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2022-2582, a medium severity cyber security vulnerability from 2022. The AWS S3 Crypto SDK sends an unencrypted hash of the pla...","CVE-2022-2582, CVE-2022-2582 vulnerability, CVE-2022-2582 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, amazon security, aws_software_development_kit vulnerability","\u002Fwhat-is\u002Fcve-2022-2582",{"@context":78,"@type":79,"headline":73,"description":74,"datePublished":10,"dateModified":11,"author":80,"publisher":84,"about":88,"mainEntityOfPage":92,"articleSection":95,"keywords":96},"https:\u002F\u002Fschema.org","TechArticle",{"@type":81,"name":82,"url":83},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":81,"name":82,"url":83,"logo":85},{"@type":86,"url":87},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":89,"name":6,"description":90,"additionalType":91},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":93,"@id":94},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2022-2582","Cybersecurity","CVE-2022-2582, CVE-2022-2582 vulnerability, CVE-2022-2582 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[98],{"Operator":26,"Negate":26,"Nodes":99},[100],{"Operator":101,"Negate":26,"CPEMatch":102},"OR",[103],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":104,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":105,"VersionEndIncluding":26},"D60B84C9-043E-4CE0-8069-543444CCAECD","1.34.0",[],[],{"lastModified":11,"cacheTime":109,"version":110},1793228995577,"2.0",{"score":112,"band":36,"action":113,"scoredAt":114},47,"Plan remediation","2026-10-28T06:56:02.862476+00:00"]