Lucene search
Fedot PraslovNODEJS:93HistoryMar 28, 2016 - 5:59 p.m.
Insecure Entropy Source - Math.random()
2016-03-2817:59:38
Fedot Praslov
www.npmjs.com
28
0.002 Low
EPSS
Percentile
64.9%
Overview
Affected versions of node-uuid consistently fall back to using Math.random as an entropy source instead of crypto, which may result in guessable UUID’s.
Recommendation
Update to version 1.4.4 or later.
References
Related
ibm
ibm
nvd
nvd
CVE-2015-8851
2020-01-30 21:15:14
cvelist
cvelist
CVE-2015-8851
2020-01-30 20:43:26
debiancve
debiancve
CVE-2015-8851
2020-01-30 21:15:14
cve
cve
CVE-2015-8851
2020-01-30 21:15:14
github
github
Insecure Entropy Source - Math.random() in node-uuid
2020-04-16 03:14:50
ubuntucve
ubuntucve
CVE-2015-8851
2020-01-30 00:00:00
prion
prion
Design/Logic Flaw
2020-01-30 21:15:00
osv
osv
Insecure Entropy Source - Math.random() in node-uuid
2020-04-16 03:14:50
veracode
veracode