CVE-2017-5999

Name of the Vulnerable Software and Affected Versions sysPass versions 2.0 through 2.1

Description An issue was discovered in sysPass where an algorithm was never sufficiently reviewed by cryptographers. The use of the MCRYPT RIJNDAEL 256() function, which is the 256-bit block version of Rijndael and not AES, could potentially help an attacker create havoc in the remote system.

Recommendations For sysPass versions 2.0 through 2.1, update to version 2.1 or later to resolve the issue.