CVE-2023-48056

PyPinkSign v0.5.1 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption

published November 16, 2023

CVSS
—
EPSS
0%
Percentile
33.8
In the wild
Unconfirmed
What it is

PyPinkSign v0.5.1 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption. This vulnerability can lead to the disclosure of information and communications.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00406 · 33.8th percentile
Published
2023-11-16T00:00Z
EPSS history
Timeline
  • 16 NOV 00:00Z
    PyPinkSign v0.5.1 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption
    cvelistv5