Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:36387
HistoryJul 18, 2022 - 9:20 a.m.

Insecure Cryptography

2022-07-1809:20:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
insecure cryptography
cryptographic configuration
cookies generation
openid values
token prediction
token forging
software vulnerability

EPSS

0.001

Percentile

31.8%

JSON

packbackbooks/lti-1p3-tool uses an insecure cryptographic configuration. The vulnerability exists due to improper configuration of generating cookies and openid values which allows an attacker to predict the token value and forge the token.

Related

cvelist 1
prion 1
cve 1
osv 2
github 1
nvd 1
cvelist
cvelist
CVE-2022-31157 Use of a Broken or Risky Cryptographic Algorithm in packbackbooks/lti-1-3-php-library
2022-07-15 17:15:21
prion
prion
Code injection
2022-07-15 18:15:00
cve
cve
CVE-2022-31157
2022-07-15 18:15:08
osv
osv
CVE-2022-31157
2022-07-15 18:15:08
LTI 1.3 Tool Library's function used to generate random nonces not sufficiently cryptographically complex before v5.0
2022-07-15 20:55:46
github
github
LTI 1.3 Tool Library's function used to generate random nonces not sufficiently cryptographically complex before v5.0
2022-07-15 20:55:46
nvd
nvd
CVE-2022-31157
2022-07-15 18:15:08

EPSS

0.001

Percentile

31.8%

JSON
Related for VERACODE:36387
cvelist1prion1cve1osv2github1nvd1