CVE-2016-6485

The __construct function in Framework/Encryption/Crypt.php in Magento 2 uses the PHP rand function to generate a random number for the initialization vector…

published March 1, 2017

CVSS
—
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

The __construct function in Framework/Encryption/Crypt.php in Magento 2 uses the PHP rand function to generate a random number for the initialization vector, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by guessing the value.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00846 · 57.4th percentile
Published
2017-03-01T20:00Z
EPSS history
Timeline
  • 01 MAR 20:00Z
    The __construct function in Framework/Encryption/Crypt.php in Magento 2 uses the PHP rand function to generate a random number for the initialization vector…
    cvelistv5