Lucene search
GoogleOSV:GHSA-H7QW-MXRM-C6H2HistoryNov 20, 2019 - 1:33 a.m.
Unauthenticated crypto and weak IV in Magento\Framework\Encryption
2019-11-2001:33:05
Google
osv.dev
6
EPSS
0.003
Percentile
71.7%
The __construct function in Framework/Encryption/Crypt.php in Magento 2 uses the PHP rand function to generate a random number for the initialization vector, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by guessing the value.
Related
cvelist
cvelist
CVE-2016-6485
2017-03-01 20:00:00
cve
cve
CVE-2016-6485
2017-03-01 20:59:00
nvd
nvd
CVE-2016-6485
2017-03-01 20:59:00
veracode
veracode
Insecure Random Number Generator
2019-11-20 05:57:01
prion
prion
Design/Logic Flaw
2017-03-01 20:59:00
friendsofphp
friendsofphp
Unauthenticated crypto and weak IV in Magento\Framework\Encryption
1970-01-01 00:00:00
github
github
Unauthenticated crypto and weak IV in Magento\Framework\Encryption
2019-11-20 01:33:05