Описание
Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across encryptions in the IDP server, resulting in weak encryption of data.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | ignored | end of standard support, was needed |
| cosmic | not-affected | 4.5.0+dfsg1-0ubuntu2 |
| devel | not-affected | 4.5.0+dfsg1-0ubuntu2 |
| disco | not-affected | 4.5.0+dfsg1-0ubuntu2 |
| eoan | not-affected | 4.5.0+dfsg1-0ubuntu2 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra-legacy/xenial | needed | |
| esm-infra/bionic | needed | |
| esm-infra/focal | not-affected | 4.5.0+dfsg1-0ubuntu2 |
Показывать по
EPSS
5 Medium
CVSS2
5.3 Medium
CVSS3
Связанные уязвимости
Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across encryptions in the IDP server, resulting in weak encryption of data.
Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across encryptions in the IDP server, resulting in weak encryption of data.
Python package pysaml2 version 4.4.0 and earlier reuses the initializa ...
Pysaml2 improperly initializes encryption vector
EPSS
5 Medium
CVSS2
5.3 Medium
CVSS3