CVE-2020-1773: Insufficient Entropy

An attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, password reset tokens and automatically generated passwords. This issue affects OTRS Community Edition:...

CVE-2019-10064: Insufficient Entropy

hostapd before 2.6, in EAP mode, makes calls to the rand and random standard library functions without any preceding srand or srandom call, which results in inappropriate use of deterministic values. This was fixed in conjunction with CVE-2016-10743...

PT-2020-7829

Name of the Vulnerable Software and Affected Versions: Juniper QFX3500 and QFX3600 switches affected versions not specified Description: The issue is related to insufficient entropy collection from the RANDOM INTERRUPT entropy source when the device boots up, potentially leading to weak or...

CVE-2012-5618

Ushahidi before 2.6.1 has insufficient entropy for forgot-password tokens...

Default credentials

Ushahidi before 2.6.1 has insufficient entropy for forgot-password tokens...

Design/Logic Flaw

ZPanel 10.0.1 has insufficient entropy for its password reset process...

CVE-2012-5686

ZPanel 10.0.1 has insufficient entropy for its password reset process...

CVE-2012-5618

Ushahidi before 2.6.1 has insufficient entropy for forgot-password tokens...

PT-2020-7260

Name of the Vulnerable Software and Affected Versions: Ushahidi versions prior to 2.6.1 Description: The issue is related to insufficient entropy for forgot-password tokens. Recommendations: For versions prior to 2.6.1, update to version 2.6.1 or later to resolve the issue...

CVE-2012-5686: Weak Password Recovery Mechanism for Forgotten Password

ZPanel 10.0.1 has insufficient entropy for its password reset process...

PT-2020-7263

Name of the Vulnerable Software and Affected Versions: ZPanel version 10.0.1 Description: The issue is related to insufficient entropy in the password reset process. Recommendations: For ZPanel version 10.0.1, consider modifying the password reset process to incorporate sufficient entropy to...

CVE-2012-5618: Weak Password Recovery Mechanism for Forgotten Password

Ushahidi before 2.6.1 has insufficient entropy for forgot-password tokens...

CVE-2015-8851: Insufficient Entropy

node-uuid before 1.4.4 uses insufficiently random data to create a GUID, which could make it easier for attackers to have unspecified impact via brute force guessing...

Insufficient Entropy

Overview Versions of cryptiles prior to 4.1.2 are vulnerable to Insufficient Entropy. The randomDigits method does not provide sufficient entropy and its generates digits that are not evenly distributed. Recommendation Upgrade to version 4.1.2. The package is deprecated and has been moved to...

Insufficient Entropy

Overview All versions of parsel use an insecure key derivation function. The package runs keys of arbitrary lengths through one round of SHA256 hashing for key stretching. This allows for the use of keys of insufficient entropy with inappropriate key stretching. Recommendation The package is...

Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2019-2063)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Schneider-electric Modicon Insufficient Entropy

A Predictable Value Range from Previous Values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Version 1.5.0.0, Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The affected...

FortiOS DRBG unsufficient entropy (FG-IR-19-186)

An Insufficient Entropy in PRNG vulnerability in Fortinet FortiOS 6.2.1 and below for device not enable hardware TRNG token and models not support builtin TRNG seed allows attacker to theoretically recover the long term ECDSA secret in a TLS client with a RSA handshake and mutual ECDSA...

CVE-2019-15703

An Insufficient Entropy in PRNG vulnerability in Fortinet FortiOS 6.2.1, 6.2.0, 6.0.8 and below for device not enable hardware TRNG token and models not support builtin TRNG seed allows attacker to theoretically recover the long term ECDSA secret in a TLS client with a RSA handshake and mutual...

CVE-2019-15703

Fortinet FortiOS is affected by CVE-2019-15703 where insufficient entropy in the PRNG (DRBG) can theoretically allow recovery of a long-term ECDSA secret in a TLS client with RSA handshake and mutual ECDSA authentication, via flush+reload side-channel attacks in FortiGate VM models only. The vuln...