Aescrypt

gem: aescrypt

Source repositories

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2013-7463	Aescrypt Project Aescrypt	Hig	0.49	7.5	0.01		Apr 19, 2017	The aescrypt gem 1.0.0 for Ruby does not randomize the CBC IV for use with the AESCrypt.encrypt and AESCrypt.decrypt functions, which allows attackers to defeat cryptographic protection mechanisms via a chosen plaintext attack.

CVE-2013-7463HigApr 19, 2017
Aescrypt Project
Aescrypt
risk 0.49cvss 7.5epss 0.01
The aescrypt gem 1.0.0 for Ruby does not randomize the CBC IV for use with the AESCrypt.encrypt and AESCrypt.decrypt functions, which allows attackers to defeat cryptographic protection mechanisms via a chosen plaintext attack.