3 matches found
UBUNTU-CVE-2022-26306
LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in LibreOffice existed where the required initialization vector for encryption was always the same which...
7.5CVSS7.1AI score0.01005EPSS
SaveExploits0References5
Weak Cryptography
railties has a weak cryptography scheme for secrets. It uses an unauthenticated CBC mode with a constant IV...
6.9AI score
SaveExploits0
CVE-2013-6394
Percona XtraBackup before 2.1.6 uses a constant string for the initialization vector IV, which makes it easier for local users to defeat cryptographic protection mechanisms and conduct plaintext attacks...
2.1CVSS6.6AI score0.0038EPSS
SaveExploits0References1
20