Lucene search
HistoryApr 19, 2023 - 8:15 p.m.
CVE-2023-30797
netflix lemur
default credentials
vulnerability
insufficiently random values
access gained
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
53.1%
Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials. The insufficiently random values may allow an attacker to guess the credentials and gain access to resources managed by Lemur.
Affected configurations
Node
netflixlemurRange<1.3.2
Related
prion
prion
Default credentials
2023-04-19 20:15:00
osv
osv
PYSEC-2023-20
2023-04-19 20:15:00
CVE-2023-30797
2023-04-19 20:15:12
Lemur subject to insecure random generation
2023-03-01 18:05:56
veracode
veracode
Insecure Random Number Generator
2023-04-24 11:20:52
cve
cve
CVE-2023-30797
2023-04-19 20:15:12
cvelist
cvelist
CVE-2023-30797 Insecure Random Generation in Netflix Lemur
2023-04-19 19:10:12
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
53.1%
Related for NVD:CVE-2023-30797