Lucene search
Veracode Vulnerability DatabaseVERACODE:31555HistoryAug 11, 2021 - 4:14 a.m.
Insecure Random Number Generation
2021-08-1104:14:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
39.0%
yiisoft/yii2 is using insecure random number generation. The vulnerability exists because it uses the function mt_rand() in BaseMailer.php which is a predictable Random Number algorithm for random bytes and int generation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| yiisoft/yii2 | le | 2.0.42.1 | |
| yiisoft/yii2 | le | 2.0.42.1 |
Related
osv
osv
Use of Insufficiently Random Values in yiisoft/yii2-dev
2021-09-01 18:35:34
CVE-2021-3689
2021-08-10 11:15:09
github
github
Use of Insufficiently Random Values in yiisoft/yii2-dev
2021-09-01 18:35:34
prion
prion
Code injection
2021-08-10 11:15:00
nvd
nvd
CVE-2021-3689
2021-08-10 11:15:09
cve
cve
CVE-2021-3689
2021-08-10 11:15:09
cvelist
cvelist
huntr
huntr
in yiisoft/yii2
2021-07-29 07:55:49