Lucene search

K
cvelistRedhatCVELIST:CVE-2013-4347
HistoryMay 20, 2014 - 2:00 p.m.

CVE-2013-4347

2014-05-2014:00:00
redhat
www.cve.org

6.2 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.0%

The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote attackers to guess the nonce via a brute force attack.

6.2 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.0%