CVE-2023-4472 Cryptographically weak PRNG in Opinio 7.22

2024-02-0122:11:21

CWE-335

Mandiant

www.cve.org

cve-2023-4472

opinio

prng

unauthenticated account takeover

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.2%

JSON

Objectplanet Opinio version 7.22 and prior uses a cryptographically weak pseudo-random number generator (PRNG) coupled to a predictable seed, which could lead to an unauthenticated account takeover of any user on the application.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "platforms": [
      "All",
      "Cloud",
      "Browser"
    ],
    "product": "Opinio",
    "vendor": "Objectplanet",
    "versions": [
      {
        "status": "affected",
        "version": "7.22"
      },
      {
        "status": "unaffected",
        "version": "7.23"
      }
    ]
  }
]