Lucene search
GoogleOSV:PYSEC-2023-20HistoryApr 19, 2023 - 8:15 p.m.
PYSEC-2023-20
2023-04-1920:15:00
Google
osv.dev
11
netflix
lemur
default credentials
vulnerability
insufficiently random values
attacker
resources
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.002
Percentile
53.0%
Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials. The insufficiently random values may allow an attacker to guess the credentials and gain access to resources managed by Lemur.
Related
prion
prion
Default credentials
2023-04-19 20:15:00
osv
osv
CVE-2023-30797
2023-04-19 20:15:12
Lemur subject to insecure random generation
2023-03-01 18:05:56
veracode
veracode
Insecure Random Number Generator
2023-04-24 11:20:52
cve
cve
CVE-2023-30797
2023-04-19 20:15:12
nvd
nvd
CVE-2023-30797
2023-04-19 20:15:12
cvelist
cvelist
CVE-2023-30797 Insecure Random Generation in Netflix Lemur
2023-04-19 19:10:12
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.002
Percentile
53.0%
Related for OSV:PYSEC-2023-20