CVE-2019-0729

The CVE-2019-0729 entry concerns Microsoft Azure IoT Java SDK. The connected MSRC advisory specifies the root cause as improper randomness in symmetric key generation, enabling an attacker to derive/predict the generated keys and gain elevated privileges. Affected component: Azure IoT Java SDK (k...

CVE-2019-0741

The CVE-2019-0741 entry describes an information-disclosure vulnerability in the Microsoft Azure IoT Java SDK where sensitive user data is logged. Affected component/file: the Java SDK’s logging of sensitive information. Root cause: logs may contain confidential data if logs are exposed, enabling...