Lucene search

K
freebsdFreeBSD2991178F-CBE8-11ED-956F-7054D21A9E2A
HistoryAug 26, 2012 - 12:00 a.m.

py39-Elixir -- weak use of cryptography

2012-08-2600:00:00
vuxml.freebsd.org
6

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.002

Percentile

60.8%

Red Hat Security Response Team reports:

Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector (IV), which makes it easier for context-dependent users to obtain sensitive information and decrypt the database.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchpy39-elixir<= 0.8.0UNKNOWN

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.002

Percentile

60.8%