UBUNTU-CVE-2017-1000246

Advisory lineage Upstream: 1 Downstream: 0
Published: 17 Nov 2017, 04:29
Last modified:24 Oct 2025, 04:46

Vulnerability Summary

Overall Risk (default)
low
21/100
CVSS Score
5.3 MEDIUM
3.0 (osv_ubuntu)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

17 Nov 2017, 04:29
Published
Vulnerability first disclosed
24 Oct 2025, 04:46
Last Modified
Vulnerability information updated

Description

Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across encryptions in the IDP server, resulting in weak encryption of data.

CVSS Metrics

  • v3.0•MEDIUM•Score: 5.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected Systems

  • ubuntu•python-pysaml2

    all | all

References (3)