1 matches found
Weak Random Value Generation For Secrets (weak PRNG)
Spring Boot is vulnerable to the use of a weak pseudo-random number generator PRNG. The vulnerability is due to the use of predictable random value sources e.g., $random.value, $random.int, $random.long, which allows an attacker to guess or brute-force generated secrets and compromise application...
8.2CVSS5.8AI score0.00312EPSS
SaveExploits0References10Affected Software2
20