Vulnerability in Ematia Elixir

CVE-2012-2146

Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector (IV), which makes it easier for context-dependent users to obtain sensitive information and decrypt the database.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.017 (74.4th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References