Lucene search

K
osvGoogleOSV:GHSA-CQ94-QF6Q-MF2H
HistoryJul 16, 2018 - 4:50 p.m.

Pysaml2 improperly initializes encryption vector

2018-07-1616:50:30
Google
osv.dev
10

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

35.0%

Python package pysaml2 version 4.5.0 and earlier reuses the initialization vector across encryptions in the IDP server, resulting in weak encryption of data.

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

35.0%