Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Fixed
-
2.0
-
None
Description
Good day,
We are currently using "Commons-vfs2-2.0" and in the analysis of veracode found this bug in DefaultCryptor.java (near to the line 52) in this class, used "AES":
Description:
The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the disclosure of sensitive information.