Lucene search
MitreCVELIST:CVE-2016-6485HistoryMar 01, 2017 - 8:00 p.m.
CVE-2016-6485
2017-03-0120:00:00
mitre
www.cve.org
3
EPSS
0.003
Percentile
71.7%
The __construct function in Framework/Encryption/Crypt.php in Magento 2 uses the PHP rand function to generate a random number for the initialization vector, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by guessing the value.
Related
osv
osv
Unauthenticated crypto and weak IV in Magento\Framework\Encryption
2019-11-20 01:33:05
cve
cve
CVE-2016-6485
2017-03-01 20:59:00
nvd
nvd
CVE-2016-6485
2017-03-01 20:59:00
veracode
veracode
Insecure Random Number Generator
2019-11-20 05:57:01
prion
prion
Design/Logic Flaw
2017-03-01 20:59:00
friendsofphp
friendsofphp
Unauthenticated crypto and weak IV in Magento\Framework\Encryption
1970-01-01 00:00:00
github
github
Unauthenticated crypto and weak IV in Magento\Framework\Encryption
2019-11-20 01:33:05