1 matches found
Insecure Random Number Generator
invenio is vulnerable to brute force attacks. It uses an insecure random number generator rather than secure OS-driven entropy source /dev/urandom on linux for secret key generation...