Syspass · Syspass · CVE-2017-5999
**Name of the Vulnerable Software and Affected Versions**
sysPass versions 2.0 through 2.1
**Description**
An issue was discovered in sysPass where an algorithm was never sufficiently reviewed by cryptographers. The use of the MCRYPT RIJNDAEL 256() function, which is the 256-bit block version of Rijndael and not AES, could potentially help an attacker create havoc in the remote system.
**Recommendations**
For sysPass versions 2.0 through 2.1, update to version 2.1 or later to resolve the issue.