Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:30629
HistoryMay 24, 2021 - 7:47 a.m.

Insecure Random Number Generator

2021-05-2407:47:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

0.004 Low

EPSS

Percentile

74.5%

github.com/masterminds/goutils uses an insecure random number generator. The functions RandomAlphaNumeric(int) and CryptoRandomAlphaNumeric(int) does not produce secure random numbers. This allows an increased risk of brute force-style password guessing as well as a higher probability of collision.

0.004 Low

EPSS

Percentile

74.5%

Related for VERACODE:30629