Vulnerabilities > Aescrypt Project > Aescrypt

DATE CVE VULNERABILITY TITLE RISK
2017-04-19 CVE-2013-7463 Use of Insufficiently Random Values vulnerability in Aescrypt Project Aescrypt
The aescrypt gem 1.0.0 for Ruby does not randomize the CBC IV for use with the AESCrypt.encrypt and AESCrypt.decrypt functions, which allows attackers to defeat cryptographic protection mechanisms via a chosen plaintext attack.
network
low complexity
aescrypt-project CWE-330
5.0