CVE-2017-5999

CVE-2017-5999 describes a cryptographic weakness in sysPass 2.x before 2.1, where the application incorrectly uses MCRYPT_RIJNDAEL_256 instead of the more secure MCRYPT_RIJNDAEL_128 (AES) for encryption. This vulnerability, rated HIGH with a CVSS score of 7.5, allows an unauthenticated attacker to remotely compromise the confidentiality of sensitive data due to the use of a cryptographically weak algorithm. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.