Lucene search
+L

1 matches found

OSV
OSV
added 2018/10/18 5:41 p.m.30 views

GHSA-V6WR-FCH2-VM5W OrientDB Server Community Edition uses insufficiently random values to generate session IDs

OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 improperly relies on the java.util.Random class for generation of random Session ID values in the server/network/protocol/http/OHttpSessionManager.java, which makes it easier for remote attackers to predict a value by...

5.9CVSS6.6AI score0.0186EPSS
SaveExploits0References5
Rows per page
Query Builder