Executive brief
Unauthenticated crypto and weak IV in Magento\Framework\Encryption
Affected products
- Packagist magento/community-edition
- Packagist magento/project-community-edition
Junglewise Threat Intelligence
CVE-2016-6485: Unauthenticated crypto and weak IV in Magento\Framework\Encryption
CVE-2016-6485 · Severity: low · CVSS 3 · Published 2019-11-20
Technologies: magento/community-edition (Packagist), magento/project-community-edition (Packagist). Vendors: Packagist.
Related threats
- Magento Open Source Security Advisory: Patch SUPEE-10975
- Magento Patch SUPEE-9652 - Remote Code Execution using mail vulnerability
- Magento Security enhancements that help close RCE,XSS,CSRF and other vulnerabilities
- Magento Patch SUPEE-10752 - Multiple security enhancements vulnerabilities
- Magento 2 Community Edition RCE via Unsafe File Upload