Lucene search
Veracode Vulnerability DatabaseVERACODE:4931HistoryAug 21, 2017 - 2:48 p.m.
Insecure Random Number Generation
2017-08-2114:48:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.001 Low
EPSS
Percentile
40.3%
simplesamlphp is vulnerable to insecure random number generation. The library does not use a cryptographically secure number generator, using the first 16 bits of the hash of the given secret instead.
| CPE | Name | Operator | Version |
|---|---|---|---|
| simplesamlphp/simplesamlphp | le | 1.14.11 |
References
Related
nvd
nvd
CVE-2017-12871
2017-09-01 21:29:00
osv
osv
CVE-2017-12871
2017-09-01 21:29:00
SimpleSAMLphp Incorrect IV generation for encryption
2022-05-17 01:17:12
cvelist
cvelist
CVE-2017-12871
2017-09-01 21:00:00
github
github
SimpleSAMLphp Incorrect IV generation for encryption
2022-05-17 01:17:12
cve
cve
CVE-2017-12871
2017-09-01 21:29:00
prion
prion
Design/Logic Flaw
2017-09-01 21:29:00
ubuntucve
ubuntucve
CVE-2017-12871
2017-09-01 00:00:00
debiancve
debiancve
CVE-2017-12871
2017-09-01 21:29:00
friendsofphp
friendsofphp
Incorrect IV generation for encryption
2017-03-30 09:51:00