7 matches found
GHSA-GGFX-H9XJ-5V9C Insecure PRNG use in random_password_generator
The randompasswordgenerator aka RandomPasswordGenerator gem through 1.0.0 for Ruby uses Kernelrand to generate passwords, which, due to its cyclic nature, can facilitate password prediction...
CVE-2019-25061
The randompasswordgenerator aka RandomPasswordGenerator gem through 1.0.0 for Ruby uses Kernelrand to generate passwords, which, due to its cyclic nature, can facilitate password prediction...
Inadequate Encryption Strength
Overview randompasswordgenerator is a generates a random password with various useful options. Affected versions of this package are vulnerable to Inadequate Encryption Strength due to the use of Kernelrand to generate passwords, which, as a result of its cyclic nature, can facilitate password...
CVE-2019-25061
The randompasswordgenerator aka RandomPasswordGenerator gem through 1.0.0 for Ruby uses Kernelrand to generate passwords, which, due to its cyclic nature, can facilitate password prediction...
PT-2022-8283
Name of the Vulnerable Software and Affected Versions random password generator gem versions through 1.0.0 Description The issue concerns the use of Kernelrand to generate passwords, which has a cyclic nature that can facilitate password prediction. This affects the random password generator gem...
CVE-2019-25061: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
The randompasswordgenerator aka RandomPasswordGenerator gem through 1.0.0 for Ruby uses Kernelrand to generate passwords, which, due to its cyclic nature, can facilitate password prediction...
Insecure Random Number Generator
net-http-digestauth is vulnerable to insecure random number generation. The library uses Kernelrand which is a repeatable sequence of numbers, allowing a malicious user to guess the number under certain circumstances...