CVE-2012-2146

Published: Aug 26, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector (IV), which makes it easier for context-dependent users to obtain sensitive information and decrypt the database.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://groups.google.com/group/sqlelixir/browse_thread/thread/efc16227514cffa?pli=1

x_refsource_MISC

[oss-security] 20120428 Re: weak use of crypto in python-elixir can lead to information disclosure (CVE and peer review request)

mailing-list

x_refsource_MLIST

[oss-security] 20120427 weak use of crypto in python-elixir can lead to information disclosure (CVE and peer review request)

mailing-list

x_refsource_MLIST

https://bugzilla.redhat.com/show_bug.cgi?id=810013

x_refsource_MISC

http://elixir.ematia.de/trac/ticket/119

x_refsource_MISC

[oss-security] 20120429 Re: weak use of crypto in python-elixir can lead to information disclosure (CVE and peer review request)

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2012-2146

Description

Affected Products

References