Design/Logic Flaw

2023-11-1618:15:00

PRIOn knowledge base

www.prio-n.com

archery vulnerability static iv disclosure info communication aes cbc

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

25.1%

JSON

Archery v1.10.0 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption. This vulnerability can lead to the disclosure of information and communications.

CPENameOperatorVersion
archeryeq1.9.0

CPE	Name	Operator	Version
	archery	eq	1.9.0

References

gxx777.github.io/Archery_v1.10.0_Cryptographic_API_Misuse_Vulnerability.md