0.002 Low
EPSS
Percentile
53.1%
lemur is vulnerable to an Insecure Random Number Generator. The vulnerability is due to insufficiently random values which may allow an attacker to guess the credentials and gain access to restricted resources.
github.com/Netflix/lemur/commit/666d853212174ee7f4e6f8b3b4b389ede1872238
github.com/Netflix/lemur/security/advisories/GHSA-5fqv-mpj8-h7gm
github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2023-001.md
vulncheck.com/advisories/netflix-lemur-weak-rng