🔍

CompTIA SecurityX (CAS-005) CAS-005 — Question 362

Topic 1 · Question 362 of 393

Topic 1 · Question 362

The following vulnerability was detected during a recent SAST scan of an application that provides an encrypted tunnel between sites: Cipher Block Chaining Initialization Vector must be unpredictable. This vulnerability was found on the following lines of the source code: iv = b"CompTIAIV202512" cipher= Cipher(Algorithms.AES(key), modes.CBC(iv)) Which of the following is the potential impact of this vulnerability?

View community discussion →