1 matches found
CVE-2019-11495: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
In Couchbase Server 5.1.1, the cookie used for intra-node communication was not generated securely. Couchbase Server uses erlang:now to seed the PRNG which results in a small search space for potential random seeds that could then be used to brute force the cookie and execute code against a remot...
9.8CVSS8.1AI score0.02139EPSS
SaveExploits0References2
20