NVD

Id
83279  
Name
CVE-2017-5999  
Description
An issue was discovered in sysPass 2.x before 2.1, in which an algorithm was never sufficiently reviewed by cryptographers. The fact that inc/SP/Core/Crypt.class is using the MCRYPT_RIJNDAEL_256() function (the 256-bit block version of Rijndael, not AES) instead of MCRYPT_RIJNDAEL_128 (real AES) could help an attacker to create unknown havoc in the remote system.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-03-18  
Published
2017-03-06  
Modified Date
2017-03-15  
Seq
2017-5999  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
408101 83279 CVE-2016-8312 1037636  View
409353 83279 CVE-2016-6055 http://www.ibm.com/support/docview.wss?uid=swg21995515  View
409354 83279 CVE-2016-6055 http://www.ibm.com/support/docview.wss?uid=swg21995515  View
411339 83279 CVE-2017-2785 96742  View
411340 83279 CVE-2017-2785 http://www.talosintelligence.com/reports/TALOS-2017-0280/  View
411341 83279 CVE-2017-2785 96742  View
411342 83279 CVE-2017-2785 http://www.talosintelligence.com/reports/TALOS-2017-0280/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
65892 JVNDB-2017-002231 sysPass の inc/SP/Core/Crypt.class における脆弱性 sysPass の inc/SP/Core/Crypt.class には、リモートシステムが不特定の影響を受ける脆弱性が存在します。 CVE-2017-5999 CVE-2017-5999 83279 5 7.5 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002231.html 2017-03-01 2017-04-05 View