CVE-2021-3689 Use of Predictable Algorithm in Random Number Generator in yiisoft/yii2

yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator...

PT-2021-21400

Name of the Vulnerable Software and Affected Versions yii2 affected versions not specified Description The issue concerns the use of a predictable algorithm in the random number generator. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2021-21407

Name of the Vulnerable Software and Affected Versions yii2 affected versions not specified Description The issue concerns the use of a predictable algorithm in the random number generator. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

CVE-2021-3692: Use of Predictable Algorithm in Random Number Generator

yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator...

yii2 安全特征问题漏洞

yii2 is a fast, secure and professional PHP framework. A security vulnerability exists in yii2 that stems from yii2's susceptibility to predictable algorithms in random number generators...

CVE-2021-3689: Use of Predictable Algorithm in Random Number Generator

yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator...

PT-2021-21713

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2021.2.16363 Description The issue is related to the use of an insecure pseudorandom number generator PRNG in JetBrains YouTrack. This can potentially lead to predictable and exploitable outcomes...

CVE-2021-32596

A use of one-way hash with a predictable salt vulnerability in the password storing mechanism of FortiPortal 6.0.0 through 6.04 may allow an attacker already in possession of the password store to decrypt the passwords by means of precomputed tables...

CVE-2021-32596

A use of one-way hash with a predictable salt vulnerability in the password storing mechanism of FortiPortal 6.0.0 through 6.04 may allow an attacker already in possession of the password store to decrypt the passwords by means of precomputed tables...

CVE-2021-32596

A use of one-way hash with a predictable salt vulnerability in the password storing mechanism of FortiPortal 6.0.0 through 6.04 may allow an attacker already in possession of the password store to decrypt the passwords by means of precomputed tables...

CVE-2021-32596

A use of one-way hash with a predictable salt vulnerability in the password storing mechanism of FortiPortal 6.0.0 through 6.04 may allow an attacker already in possession of the password store to decrypt the passwords by means of precomputed tables...

CVE-2021-32596

CVE-2021-32596 affects FortiPortal 6.0.0 through 6.04, where a vulnerable password store uses a one-way hash with a predictable salt, enabling an attacker with access to the password store to decrypt passwords via precomputed tables. The connected sources (Fortinet advisory FG-IR-21-094 and relat...

PT-2021-21351

Name of the Vulnerable Software and Affected Versions showdoc affected versions not specified Description The issue is related to the use of a cryptographically weak pseudo-random number generator PRNG. This means that the random numbers generated by the system may not be sufficiently random,...

PT-2021-19800

Name of the Vulnerable Software and Affected Versions FortiPortal versions 6.0.0 through 6.04 Description A use of one-way hash with a predictable salt vulnerability in the password storing mechanism may allow an attacker already in possession of the password store to decrypt the passwords by mea...

FortiPortal - Use of a predictable salt and digest-based algorithm for password hashing

A use of one-way hash with a predictable salt CWE-760 vulnerability in the password storing mechanism of FortiPortal may allow an attacker already in possession of the password store to decrypt the passwords by means of precomputed tables...

Fortinet FortiPortal 安全漏洞

Fortinet FortiSandbox is an APT Advanced Persistent Threat protection appliance from Fortinet. The appliance offers dual sandbox technology, dynamic threat intelligence system, real-time control panel and reporting. Fortinet FortiPortal has a security vulnerability that exists due to FortiPortal'...

in star7th/showdoc

✍️ Description The referenced code contains a hard-coded salt that is used for all passwords, ideally - a unique salt should be generated for each password and then would be stored alongside it as oppose to the constant one that is used for all passwords in the showdoc repository. 🕵️‍♂️ Proof of...

CVE-2021-27499: Generation of Predictable IV with CBC Mode

Ypsomed mylife Cloud, mylife Mobile Application, Ypsomed mylife Cloud: All versions prior to 1.7.2, Ypsomed mylife App: All versions prior to 1.7.5,The application layer encryption of the communication protocol between the Ypsomed mylife App and mylife Cloud uses non-random IVs, which allows...

CVE-2021-28674

The node management page in SolarWinds Orion Platform before 2020.2.5 HF1 allows an attacker to create or delete a node outside of the attacker's perimeter via an account with write permissions. This occurs because node IDs are predictable with incrementing numbers and the access control on...

CVE-2021-28674

The node management page in SolarWinds Orion Platform before 2020.2.5 HF1 allows an attacker to create or delete a node outside of the attacker's perimeter via an account with write permissions. This occurs because node IDs are predictable with incrementing numbers and the access control on...