CVE-2017-1000246

Published
View on NVD ↗
CVSS v3
N/A
CVSS v2
5
MEDIUM
Affected
1
PROJECT

Description

Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across encryptions in the IDP server, resulting in weak encryption of data.

Python implementation of SAML2
GitHubGitHub
607