Predictable Random Number Generator (PRNG)

org.sakaiproject.kernel, sakai-kernel-impl is vulnerable to Use of a Predictable Random Number Generator PRNG. The vulnerability is due to the use of java.util.Random, a non-cryptographic PRNG, for initializing the AES256TextEncryptor password, which allows an attacker to predict the encryption k...

org.sakaiproject.kernel:sakai-kernel-component (>=1.3.0-b03, <=10.7) potentially affected by CVE-2025-62710 via org.sakaiproject.kernel:sakai-kernel-impl (>=1.3.0-b03, <=10.7)

org.sakaiproject.kernel:sakai-kernel-impl MAVEN version =1.3.0-b03, =1.3.0-b03, =10.7 Source cves: CVE-2025-62710 Source advisory: SNYK:JAVA-ORGSAKAIPROJECTKERNEL-13669871...

org.sakaiproject.kernel:sakai-kernel-component (1.3.0-b04) potentially affected by CVE-2025-62710 via org.sakaiproject.kernel:sakai-kernel-impl (1.3.0-b04)

org.sakaiproject.kernel:sakai-kernel-impl MAVEN version 1.3.0-b04 is affected by a known vulnerability. The following packages have a transitive dependency on org.sakaiproject.kernel:sakai-kernel-impl and may be impacted: - org.sakaiproject.kernel:sakai-kernel-component 1.3.0-b04 Source cves:...

org.sakaiproject.kernel:sakai-kernel-component (1.3.0-b06) potentially affected by CVE-2025-62710 via org.sakaiproject.kernel:sakai-kernel-impl (1.3.0-b06)

org.sakaiproject.kernel:sakai-kernel-impl MAVEN version 1.3.0-b06 is affected by a known vulnerability. The following packages have a transitive dependency on org.sakaiproject.kernel:sakai-kernel-impl and may be impacted: - org.sakaiproject.kernel:sakai-kernel-component 1.3.0-b06 Source cves:...

org.sakaiproject.kernel:sakai-kernel-component (1.3.0-rc02) potentially affected by CVE-2025-62710 via org.sakaiproject.kernel:sakai-kernel-impl (1.3.0-rc02)

org.sakaiproject.kernel:sakai-kernel-impl MAVEN version 1.3.0-rc02 is affected by a known vulnerability. The following packages have a transitive dependency on org.sakaiproject.kernel:sakai-kernel-impl and may be impacted: - org.sakaiproject.kernel:sakai-kernel-component 1.3.0-rc02 Source cves:...

org.sakaiproject.kernel:sakai-kernel-component (1.3.2) potentially affected by CVE-2025-62710 via org.sakaiproject.kernel:sakai-kernel-impl (1.3.2)

org.sakaiproject.kernel:sakai-kernel-impl MAVEN version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.sakaiproject.kernel:sakai-kernel-impl and may be impacted: - org.sakaiproject.kernel:sakai-kernel-component 1.3.2 Source cves:...

org.sakaiproject.kernel:sakai-kernel-component (1.3.3) potentially affected by CVE-2025-62710 via org.sakaiproject.kernel:sakai-kernel-impl (1.3.3)

org.sakaiproject.kernel:sakai-kernel-impl MAVEN version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.sakaiproject.kernel:sakai-kernel-impl and may be impacted: - org.sakaiproject.kernel:sakai-kernel-component 1.3.3 Source cves:...

org.sakaiproject.kernel:sakai-kernel-component (10.4) potentially affected by CVE-2025-62710 via org.sakaiproject.kernel:sakai-kernel-impl (10.4)

org.sakaiproject.kernel:sakai-kernel-impl MAVEN version 10.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.sakaiproject.kernel:sakai-kernel-impl and may be impacted: - org.sakaiproject.kernel:sakai-kernel-component 10.4 Source cves: CVE-2025-6271...

org.sakaiproject.kernel:sakai-kernel-component (10.6) potentially affected by CVE-2025-62710 via org.sakaiproject.kernel:sakai-kernel-impl (10.6)

org.sakaiproject.kernel:sakai-kernel-impl MAVEN version 10.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.sakaiproject.kernel:sakai-kernel-impl and may be impacted: - org.sakaiproject.kernel:sakai-kernel-component 10.6 Source cves: CVE-2025-6271...

org.sakaiproject.kernel:sakai-kernel-component (1.3.0-b03) potentially affected by CVE-2025-62710 via org.sakaiproject.kernel:sakai-kernel-impl (1.3.0-b03)

org.sakaiproject.kernel:sakai-kernel-impl MAVEN version 1.3.0-b03 is affected by a known vulnerability. The following packages have a transitive dependency on org.sakaiproject.kernel:sakai-kernel-impl and may be impacted: - org.sakaiproject.kernel:sakai-kernel-component 1.3.0-b03 Source cves:...

org.sakaiproject.kernel:sakai-kernel-component (1.3.0-b07) potentially affected by CVE-2025-62710 via org.sakaiproject.kernel:sakai-kernel-impl (1.3.0-b07)

org.sakaiproject.kernel:sakai-kernel-impl MAVEN version 1.3.0-b07 is affected by a known vulnerability. The following packages have a transitive dependency on org.sakaiproject.kernel:sakai-kernel-impl and may be impacted: - org.sakaiproject.kernel:sakai-kernel-component 1.3.0-b07 Source cves:...

org.sakaiproject.kernel:sakai-kernel-component (1.3.0-rc01) potentially affected by CVE-2025-62710 via org.sakaiproject.kernel:sakai-kernel-impl (1.3.0-rc01)

org.sakaiproject.kernel:sakai-kernel-impl MAVEN version 1.3.0-rc01 is affected by a known vulnerability. The following packages have a transitive dependency on org.sakaiproject.kernel:sakai-kernel-impl and may be impacted: - org.sakaiproject.kernel:sakai-kernel-component 1.3.0-rc01 Source cves:...

org.sakaiproject.kernel:sakai-kernel-component (1.3.0-rc03) potentially affected by CVE-2025-62710 via org.sakaiproject.kernel:sakai-kernel-impl (1.3.0-rc03)

org.sakaiproject.kernel:sakai-kernel-impl MAVEN version 1.3.0-rc03 is affected by a known vulnerability. The following packages have a transitive dependency on org.sakaiproject.kernel:sakai-kernel-impl and may be impacted: - org.sakaiproject.kernel:sakai-kernel-component 1.3.0-rc03 Source cves:...

org.sakaiproject.kernel:sakai-kernel-component (1.3.0) potentially affected by CVE-2025-62710 via org.sakaiproject.kernel:sakai-kernel-impl (1.3.0)

org.sakaiproject.kernel:sakai-kernel-impl MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.sakaiproject.kernel:sakai-kernel-impl and may be impacted: - org.sakaiproject.kernel:sakai-kernel-component 1.3.0 Source cves:...

org.sakaiproject.kernel:sakai-kernel-component (10.3) potentially affected by CVE-2025-62710 via org.sakaiproject.kernel:sakai-kernel-impl (10.3)

org.sakaiproject.kernel:sakai-kernel-impl MAVEN version 10.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.sakaiproject.kernel:sakai-kernel-impl and may be impacted: - org.sakaiproject.kernel:sakai-kernel-component 10.3 Source cves: CVE-2025-6271...

org.sakaiproject.kernel:sakai-kernel-component (10.7) potentially affected by CVE-2025-62710 via org.sakaiproject.kernel:sakai-kernel-impl (10.7)

org.sakaiproject.kernel:sakai-kernel-impl MAVEN version 10.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.sakaiproject.kernel:sakai-kernel-impl and may be impacted: - org.sakaiproject.kernel:sakai-kernel-component 10.7 Source cves: CVE-2025-6271...

EUVD-2025-35623

Sakai kernel-impl: predictable PRNG used to generate server‑side encryption key in EncryptionUtilityServiceImpl...

SAK-50571 Sakai Kernel users created with type roleview can login as a normal user

Impact Illegal access can be granted to the system. References see https://sakaiproject.atlassian.net/browse/SAK-50571...

GHSA-CX95-Q6GX-W4QP SAK-50571 Sakai Kernel users created with type roleview can login as a normal user

Impact Illegal access can be granted to the system. References see https://sakaiproject.atlassian.net/browse/SAK-50571...

org.apache.abdera:abdera-bundle (>=1.1.2, <=1.1.3), org.apache.abdera:abdera-jcr (>=0.4.0-incubating, <=1.1.3) +6 more potentially affected by CVE-2015-1833 via org.apache.jackrabbit:jackrabbit-core (1.4)

org.apache.jackrabbit:jackrabbit-core MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.jackrabbit:jackrabbit-core and may be impacted: - org.apache.abdera:abdera-bundle =1.1.2, =0.4.0-incubating, =1.14, =1.3.0-b03, =1.3.0-b0...