CVE-2016-7798Alta · CVSS 7.5EPSS 3,17%Sin corrección publicadaCVE-2016-7798The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm) when the IV is set before the key, which makes it easier for context-dependent attackers to bypass the encryption protection mechanism.ruby-encryptorSistemas operativosPublicación 30 de enero de 2017Actualización 6 de agosto de 2024Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗