PT-2012-3836
CVE-2012-2146
·
تاريخ النشر
2012-08-26
·
تاريخ التحديث
2022-05-17
الوصف من
CVSS 4.0
8.7
عاليةالمقاييسAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Elixir versions prior to 0.8.0
Elixir versions 0.8.0
Description
The issue arises from Elixir using Blowfish in CFB mode without constructing a unique initialization vector (IV). This makes it easier for context-dependent users to obtain sensitive information and decrypt the database.
Recommendations
For Elixir versions prior to 0.8.0, update to a version that includes the patch to mitigate this issue.
For Elixir version 0.8.0, apply the provided patch to address the vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾