Insecure Randomness

🗓️ 05 Apr 2019 19:52:18Reported by Veracode Vulnerability DatabaseType

spring-security-core insecure randomness vulnerabilit

Reporter	Title	Published	Views	Family All 21
IBM Security Bulletins	Security Bulletin: IBM Cognos Controller has addressed multiple vulnerabilities	2 Dec 202219:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE)	12 Jan 202114:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE)	24 Aug 202010:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator vulnerable to multiple vulnerabilities due to Spring Security	13 May 202214:58	–	ibm
CVE	CVE-2019-3795	9 Apr 201915:29	–	cve
Cvelist	CVE-2019-3795 Insecure Randomness When Using a SecureRandom Instance Constructed by Spring Security	9 Apr 201915:29	–	cvelist
Debian	[SECURITY] [DLA 1794-1] libspring-security-2.0-java security update	20 May 201903:52	–	debian
Tenable Nessus	Debian DLA-1794-1 : libspring-security-2.0-java security update	20 May 201900:00	–	nessus
EUVD	EUVD-2019-0437	7 Oct 202500:30	–	euvd
Github Security Blog	Spring Security uses insufficiently random values	16 Apr 201915:10	–	github

Vulners

Node

springframework spring-security-coreRange5.0.0.RELEASE–5.0.11.RELEASEjava

springframework spring-security-coreRange5.1.0.RELEASE–5.1.4.RELEASEjava

Source	Link
github	www.github.com/spring-projects/spring-security/issues/6734
securityfocus	www.securityfocus.com/bid/107802
lists	www.lists.debian.org/debian-lts-announce/2019/05/msg00026.html
pivotal	www.pivotal.io/security/cve-2019-3795

02 Nov 2021 22:31Current

5.5Medium risk

Vulners AI Score5.5

CVSS 33.8 - 5.3

CVSS 25

EPSS0.00548