The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm) when the IV is set before the key, which makes it easier for context-dependent attackers to bypass the encryption protection mechanism.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-01-30T22:00:00
Updated: 2024-08-06T02:04:56.020Z
Reserved: 2016-09-09T00:00:00
Link: CVE-2016-7798
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2017-01-30T22:59:00.747
Modified: 2020-11-05T14:56:15.433
Link: CVE-2016-7798
Redhat