7.5
CVE-2023-48056
- EPSS 0.47%
- Veröffentlicht 16.11.2023 18:15:07
- Zuletzt bearbeitet 21.11.2024 08:31:03
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginPyPinkSign v0.5.1 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption. This vulnerability can lead to the disclosure of information and communications.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Bandoche ≫ Pypinksign Version0.5.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.47% | 0.372 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
CWE-330 Use of Insufficiently Random Values
The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.
http://bandoche.com
http://pypinksign.com
https://gxx777.github.io/PyPinkSign_v0.5.1_Cryptographic_API_Misuse_Vulnerability.md