Lucene search
VulnCheckCVELIST:CVE-2023-30797HistoryApr 19, 2023 - 7:10 p.m.
CVE-2023-30797 Insecure Random Generation in Netflix Lemur
2023-04-1919:10:12
CWE-330
VulnCheck
www.cve.org
netflix
lemur
insufficiently random
credentials
access
resources
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
53.1%
Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials. The insufficiently random values may allow an attacker to guess the credentials and gain access to resources managed by Lemur.
CNA Affected
[
{
"collectionURL": "https://pypi.org/project/lemur/",
"defaultStatus": "unaffected",
"packageName": "lemur",
"product": "Lemur",
"repo": "https://github.com/Netflix/lemur",
"vendor": "Netflix",
"versions": [
{
"lessThan": "<1.3.2",
"status": "affected",
"version": "0",
"versionType": "1.3.2"
}
]
}
]Related
prion
prion
Default credentials
2023-04-19 20:15:00
osv
osv
PYSEC-2023-20
2023-04-19 20:15:00
CVE-2023-30797
2023-04-19 20:15:12
Lemur subject to insecure random generation
2023-03-01 18:05:56
veracode
veracode
Insecure Random Number Generator
2023-04-24 11:20:52
cve
cve
CVE-2023-30797
2023-04-19 20:15:12
nvd
nvd
CVE-2023-30797
2023-04-19 20:15:12
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
53.1%
Related for CVELIST:CVE-2023-30797