CVE-2016-6485 in Magentoinfo

Summary

The __construct function in Framework/Encryption/Crypt.php in Magento 2 uses the PHP rand function to generate a random number for the initialization vector, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by guessing the value.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

07/27/2016

Disclosure

03/01/2017

Entries

1: VDB-97400

CPE

ready

CVSS

5.6

EPSS

0.00084

Activities

Very Low

Sources

Do you need the next level of professionalism?

Upgrade your account now!