Lucene search
Veracode Vulnerability DatabaseVERACODE:33149HistoryDec 02, 2021 - 4:28 a.m.
Insecure Random Number Generator
2021-12-0204:28:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
0.001 Low
EPSS
Percentile
50.6%
showdoc/showdoc uses an insecure random number generator. An attack is possible when user logged in by LDAP will lead to a weak password initialization, allowing an attacker to perform a brute-force attack to break the user password.
| CPE | Name | Operator | Version |
|---|---|---|---|
| showdoc/showdoc | le | v2.9.12 | |
| showdoc/showdoc | le | v2.9.12 |
Related
huntr
huntr
in star7th/showdoc
2021-11-18 15:49:09
osv
osv
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
2021-12-03 20:38:50
CVE-2021-3990
2021-12-01 11:15:07
cnvd
cnvd
showdoc security feature issue vulnerability
2021-12-02 00:00:00
cvelist
cvelist
cve
cve
CVE-2021-3990
2021-12-01 11:15:07
prion
prion
Code injection
2021-12-01 11:15:00
github
github
nvd
nvd
CVE-2021-3990
2021-12-01 11:15:07