Unsafe Pseudorandom Number Generation Through The Use Of Insecure Entropy Source

2019-01-1509:09:22

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

64.9%

JSON

uuid and node-uuid have flaws which lead to the use of an insecure entropy source “Math.random()” to generate pseudorandom numbers instead of using a secure Cryptographic API.

CPENameOperatorVersion
heapstereq0.18.2__2.gitaf4752e.el7aos
heapstereq0.18.2__4.gitaf4752e.el7
heapstereq0.18.2__3.gitaf4752e.el7aos
atomic-openshifteq3.1.1.6__8.git.64.80b61da.el7aos
atomic-openshifteq3.2.0.20__1.git.0.f44746c.el7
atomic-openshifteq3.1.1.6__1.git.0.b57e8bd.el7aos
atomic-openshifteq3.1.1.6__6.git.43.f583589.el7aos
atomic-openshifteq3.1.1.6__3.git.16.5327e56.el7aos
atomic-openshifteq3.1.0.4__1.git.15.5e061c3.el7aos
atomic-openshifteq3.1.1.6__4.git.21.cd70c35.el7aos

Name	Operator	Version
heapster	eq	0.18.2__2.gitaf4752e.el7aos
heapster	eq	0.18.2__4.gitaf4752e.el7
heapster	eq	0.18.2__3.gitaf4752e.el7aos
atomic-openshift	eq	3.1.1.6__8.git.64.80b61da.el7aos
atomic-openshift	eq	3.2.0.20__1.git.0.f44746c.el7
atomic-openshift	eq	3.1.1.6__1.git.0.b57e8bd.el7aos
atomic-openshift	eq	3.1.1.6__6.git.43.f583589.el7aos
atomic-openshift	eq	3.1.1.6__3.git.16.5327e56.el7aos
atomic-openshift	eq	3.1.0.4__1.git.15.5e061c3.el7aos
atomic-openshift	eq	3.1.1.6__4.git.21.cd70c35.el7aos