CVE-2016-7798Alta · CVSS 7.5EPSS 3,17%Corrección disponibleCVE-2016-7798The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm) when the IV is set before the key, which makes it easier for context-dependent attackers to bypass the encryption protection mechanism.ruby-encryptorSistemas operativosActualiza a 3.0.0-1Publicación 30 de enero de 2017Actualización 6 de agosto de 2024Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗