Lucene search
Veracode Vulnerability DatabaseVERACODE:18686HistoryMay 08, 2019 - 2:23 a.m.
Insecure Random Number Generator
2019-05-0802:23:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
49.5%
ratpack-session uses an insecure random number generator. The UUID generated for the session IDs does not use a cryptographically secure random generator and would potentially allow attackers to guess a session ID.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ratpack-session | le | 1.6.0 | |
| ratpack-session | le | 0.9.16 |
References
Related
prion
prion
Design/Logic Flaw
2019-05-07 07:29:00
nvd
nvd
CVE-2019-11808
2019-05-07 07:29:05
cvelist
cvelist
CVE-2019-11808
2019-05-07 06:53:16
github
github
osv
osv
CVE-2019-11808
2019-05-07 07:29:05
cve
cve
CVE-2019-11808
2019-05-07 07:29:05
