[CodeQL] Encryption using ECB, OFB or CFB

[MichaelSimons]

Applies to src/Microsoft.IdentityModel.Tokens/Encryption/SymmetricKeyWrapProvider.cs

Violation - Use of one of the following unsafe encryption modes that is not approved:

System.Security.Cryptography.CipherMode.ECB

System.Security.Cryptography.CipherMode.OFB

System.Security.Cryptography.CipherMode.CFB

These modes are vulnerable to attacks and may cause exposure of sensitive information. For example, using ECB to encrypt a plaintext block always produces a same cipher text, so it can easily tell if two encrypted messages are identical. Using approved modes can avoid these unnecessary risks.

[MichaelSimons]

This .is getting flagged within .NET as azure-activedirectory-identitymodel-extensions-for-dotnet is included in it's source build graph.