CVE-2021-32791CWE-323CWE-330

Hardcoded static IV and AAD with a reused key in AES GCM encryption in mod_auth_openidc

Medium · published July 26, 2021

CVSS v3.1
5.9
EPSS
2%
Percentile
74.1
In the wild
Unconfirmed
What it is

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In mod_auth_openidc before version 2.4.9, the AES GCM encryption in mod_auth_openidc uses a static IV and AAD. It is important to fix because this creates a static nonce and since aes-gcm is a stream cipher, this can lead to known cryptographic issues, since the same key is being reused. From 2.4.9 onwards this has been patched to use dynamic values through usage of cjose AES encryption routines.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01503 · 74.1th percentile
Weaknesses
CWE-323 · Reusing a Nonce, Key Pair in Encryption; CWE-330 · Use of Insufficiently Random Values
Published
2021-07-26T00:00Z
EPSS history
Timeline
  • 26 JUL 00:00Z
    Hardcoded static IV and AAD with a reused key in AES GCM encryption in mod_auth_openidc
    cvelistv5