PT-2021-15346

Name of the Vulnerable Software and Affected Versions NAAS versions prior to 3.10.0 Description The issue concerns the generation of API keys using an insecure pseudo-random string and hashing algorithm, which could lead to predictable keys. Recommendations For versions prior to 3.10.0, update to...

CVE-2021-23020: Use of Insufficiently Random Values

The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which could lead to predictable keys...