CVE-2013-4104

Cryptocat before 2.0.22 has weak encryption in the Socialist Millionnaire Protocol...