Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:31881
HistoryAug 31, 2021 - 7:02 a.m.

Insecure Cryptographic Function

2021-08-3107:02:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
mautic
cryptographic
function
mt_rand
pseudorandomness
session tokens
software

EPSS

0.001

Percentile

24.8%

mautic/core has insecure cryptographic function. An attacker may exploit the pseudorandomness of the function mt_rand and enumerate session tokens.

EPSS

0.001

Percentile

24.8%