PT-2017-9351

Name of the Vulnerable Software and Affected Versions openssl gem for Ruby affected versions not specified Description The issue arises when the initialization vector IV is set before the key in GCM Mode aes--gcm, allowing context-dependent attackers to bypass the encryption protection mechanism...