medium5.3
CVE-2017-1000246
Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across encryptions in the IDP server, resulting in weak encryption of data.
Impact
Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across encryptions in the IDP server, resulting in weak encryption of data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pysaml2 Project | Pysaml2 | before 4.6.0 |