CVE-2016-6485 in Magentoinfo

Zusammenfassung

von MITRE

The __construct function in Framework/Encryption/Crypt.php in Magento 2 uses the PHP rand function to generate a random number for the initialization vector, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by guessing the value.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservieren

27.07.2016

Veröffentlichung

01.03.2017

Moderieren

akzeptiert

Eintrag

VDB-97400

CPE

bereit

EPSS

0.00846

KEV

nein

Aktivitäten

very low

Quellen

Might our Artificial Intelligence support you?

Check our Alexa App!