Skip to content

Commit 636c609

Browse files
adding how to fix and impact
1 parent e74da4b commit 636c609

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

input/new.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,8 +6,8 @@
66
],
77
"cwe": ["CWE-1204"],
88
"tldr": "Affected versions of this package suffer from security misconfigurations, including using a static initialization vector (IV), generated only once during application initialization instead of being dynamically generated for each encryption operation. Additionally, the package includes an unencrypted API test endpoint that can be exposed in production environments. An attacker might leverage these vulnerabilities to gather critical information from the application.",
9-
"doest_this_affect_me": "",
10-
"how_to_fix": "",
9+
"doest_this_affect_me": "You are affected if you are using a version that falls within the vulnerable range.",
10+
"how_to_fix": "Upgrade the `adyen-java-api-library` library to the patch version.",
1111
"vulnerable_to": "Generation of Weak Initialization Vector",
1212
"related_cve_id": "",
1313
"language": "java",

0 commit comments

Comments
 (0)