Lucene search
+L

2 matches found

Cvelist
Cvelist
•added 2020/06/18 1:27 p.m.•33 views

CVE-2020-14423

Convos before 4.20 does not properly generate a random secret in Core/Settings.pm and Util.pm. This leads to a predictable CONVOSLOCALSECRET value, affecting password resets and invitations...

5.4AI score0.01059EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/18 12:00 a.m.•2 views

CVE-2020-14423: Use of Insufficiently Random Values

Convos before 4.20 does not properly generate a random secret in Core/Settings.pm and Util.pm. This leads to a predictable CONVOSLOCALSECRET value, affecting password resets and invitations...

5.3CVSS5.7AI score0.01059EPSS
SaveExploits0References2
Rows per page
Query Builder