CVE-2016-7798

Name of the Vulnerable Software and Affected Versions openssl gem for Ruby (affected versions not specified)

Description The issue arises when the initialization vector (IV) is set before the key in GCM Mode (aes-*-gcm), allowing context-dependent attackers to bypass the encryption protection mechanism. This makes it easier for attackers to exploit the situation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.