Lucene search
Veracode Vulnerability DatabaseVERACODE:25121HistoryApr 29, 2020 - 4:26 a.m.
Insecure Random Number Generator
2020-04-2904:26:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.007 Low
EPSS
Percentile
80.9%
github.com/elastic/cloud-on-k8s uses an insecure random number generator. Passwords are generated using an insecure random number generator, which would allow an attacker to easily brute-force and discover the Elasticsearch credentials generated by ECK.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/elastic/cloud-on-k8s | eq | 1.0.0 | |
| github.com/elastic/cloud-on-k8s | eq | 1.0.0 |
Related
cve
cve
CVE-2020-7010
2020-06-03 18:15:22
osv
osv
Cryptographic Issues in ECK
2022-02-15 01:57:18
github
github
Cryptographic Issues in ECK
2022-02-15 01:57:18
ubuntucve
ubuntucve
CVE-2020-7010
2020-06-03 00:00:00
nvd
nvd
CVE-2020-7010
2020-06-03 18:15:22
cvelist
cvelist
CVE-2020-7010
2020-06-03 17:55:42
prion
prion
Stack overflow
2020-06-03 18:15:00