Количество 2
Количество 2
CVE-2016-6485
The __construct function in Framework/Encryption/Crypt.php in Magento 2 uses the PHP rand function to generate a random number for the initialization vector, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by guessing the value.
GHSA-h7qw-mxrm-c6h2
Unauthenticated crypto and weak IV in Magento\Framework\Encryption
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2016-6485 The __construct function in Framework/Encryption/Crypt.php in Magento 2 uses the PHP rand function to generate a random number for the initialization vector, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by guessing the value. | CVSS3: 7.5 | 0% Низкий | почти 9 лет назад |
| GHSA-h7qw-mxrm-c6h2 Unauthenticated crypto and weak IV in Magento\Framework\Encryption | CVSS3: 7.5 | 0% Низкий | около 6 лет назад |
Уязвимостей на страницу