The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which could lead to predictable keys...
5.5CVSS6.9AI score0.00255EPSS
SaveExploits0References1
OSV•added 2021/06/01 1:15 p.m.•7 views
CVE-2021-23020
The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which could lead to predictable keys...