CVE-2012-2146

Name of the Vulnerable Software and Affected Versions Elixir versions prior to 0.8.0 Elixir versions 0.8.0

Description The issue arises from Elixir using Blowfish in CFB mode without constructing a unique initialization vector (IV). This makes it easier for context-dependent users to obtain sensitive information and decrypt the database.

Recommendations For Elixir versions prior to 0.8.0, update to a version that includes the patch to mitigate this issue. For Elixir version 0.8.0, apply the provided patch to address the vulnerability.