Lucene search
Veracode Vulnerability DatabaseVERACODE:21561HistorySep 24, 2019 - 3:13 a.m.
Insecure Random Number Generation
2019-09-2403:13:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.001 Low
EPSS
Percentile
28.4%
pac4j-saml uses an insecure random number generation. It generates entity ID with predictable randomness for SAML2 Authentication Request as it relies on random numbers generated using an insecure RandomStringUtils PRNG algorithm from apache commons-lang3 RandomStringUtil class.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pac4j: java web security for saml | le | 3.8.1 | |
| pac4j: java web security for saml | le | 3.2.0 | |
| pac4j core | le | 3.8.1 |
Related
nvd
nvd
CVE-2019-10755
2019-09-23 23:15:10
github
github
osv
osv
CVE-2019-10755
2019-09-23 23:15:10
cve
cve
CVE-2019-10755
2019-09-23 23:15:10
prion
prion
Design/Logic Flaw
2019-09-23 23:15:00
cvelist
cvelist
CVE-2019-10755
2019-09-23 22:13:04