Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector (IV), which makes it easier for context-dependent users to obtain sensitive information and decrypt the database.
CVSS 2.0MEDIUM 4.3·Network·No auth·Interaction —·EPSS 0.01675·Published 2012-08-26·Will not fixCWE-310
