Lucene search
+L

2 matches found

PyPA
PyPA
added 2012/08/26 9:55 p.m.8 views

PYSEC-2012-13

Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector IV, which makes it easier for context-dependent users to obtain sensitive information and decrypt the database...

4.3CVSS6.4AI score0.01667EPSS
SaveExploits0References7Affected Software1
FreeBSD
FreeBSD
added 2012/08/26 12:0 a.m.16 views

py39-Elixir -- weak use of cryptography

Red Hat Security Response Team reports: Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector IV, which makes it easier for context-dependent users to obtain sensitive information and decrypt the database...

4.3CVSS5.7AI score0.01667EPSS
SaveExploits0References1
Rows per page
Query Builder