Unauthenticated crypto and weak IV in Magento\Framework\Encryption

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2016-6485 · ADVISORY
• magento/magento2#15017 · WEB
• FriendsOfPHP/security-advisories · WEB
• openwall.com/lists/oss-security/2016/07/19/3 · WEB
• openwall.com/lists/oss-security/2016/07/27/14 · WEB

Lỗ hổng khác của magento/community-edition

• CVE-2025-54267TRUNG BÌNH 6.5Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authoriza…
• CVE-2025-54266TRUNG BÌNH 4.8Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by a stored Cross-Site Sc…
• CVE-2025-54265TRUNG BÌNH 5.9Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authoriza…
• CVE-2025-54264CAO 8.1Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by a stored Cross-Site Sc…
• CVE-2025-54263CAO 8.1Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authoriza…