CVE-2019-25061

The randompasswordgenerator aka RandomPasswordGenerator gem through 1.0.0 for Ruby uses Kernelrand to generate passwords, which, due to its cyclic nature, can facilitate password prediction...

Design/Logic Flaw

The randompasswordgenerator aka RandomPasswordGenerator gem through 1.0.0 for Ruby uses Kernelrand to generate passwords, which, due to its cyclic nature, can facilitate password prediction...

CVE-2019-25061

The CVE affects the Ruby gem random_password_generator (up to version 1.0.0). The root cause is the use of Kernel#rand to generate passwords, which exhibits a cyclic behavior that can lead to password prediction. Documented impacts include potential exposure of generated passwords due to predicta...