CVE-2023-30797

Netflix Lemur prior to version 1.3.2 is affected by insecure random number generation in default credential creation. The root cause is insufficiently random values used when generating default credentials, which may allow an attacker to guess credentials and access resources managed by Lemur. Ev...

CVE-2015-7764

Affected software: Lemur 0.1.4 (Python-based TLS certificate management tool). Issue: does not use sufficient entropy in its IV when encrypting AES in CBC mode, due to improper IV generation. This underlying cause can weaken confidentiality of CBC-encrypted data. Consequence (per sources): primar...