athlon1600/php-proxy · Security
Weak Cryptography in PHP-Proxy
- GHSA ID
- GHSA-4wgf-9x5r-p938
- CVE ID
- CVE-2018-19784
- Severity
- high
- Published
- Updated
- CVSS
- 7.5 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v3
- 7.5 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
The str_rot_pass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy 5.1.0 uses weak cryptography, which makes it easier for attackers to calculate the authorization data needed for local file inclusion.
CWEs
- CWE-326 · Inadequate Encryption Strength