EUVD-2017-0161

Malware in sbrugna...

CVE-2013-7463

The aescrypt gem 1.0.0 for Ruby does not randomize the CBC IV for use with the AESCrypt.encrypt and AESCrypt.decrypt functions, which allows attackers to defeat cryptographic protection mechanisms via a chosen plaintext attack...

CVE-2013-7463

The aescrypt gem 1.0.0 for Ruby does not randomize the CBC IV for use with the AESCrypt.encrypt and AESCrypt.decrypt functions, which allows attackers to defeat cryptographic protection mechanisms via a chosen plaintext attack...

PT-2017-5765

Name of the Vulnerable Software and Affected Versions: aescrypt gem version 1.0.0 Description: The issue concerns the aescrypt gem for Ruby, which fails to randomize the CBC IV when using the AESCrypt.encrypt and AESCrypt.decrypt functions. This flaw enables attackers to bypass cryptographic...

Vulnerability in aescrypt because IV is not randomized

The aescrypt gem 1.0.0 for Ruby does not randomize the CBC IV for use with the AESCrypt.encrypt and AESCrypt.decrypt functions, which allows attackers to defeat cryptographic protection mechanisms via a chosen plaintext attack...