PT-2021-15346
CVE-2021-23020
·
تاريخ النشر
2021-06-01
·
تاريخ التحديث
2021-06-11
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
NAAS versions prior to 3.10.0
Description
The issue concerns the generation of API keys using an insecure pseudo-random string and hashing algorithm, which could lead to predictable keys.
Recommendations
For versions prior to 3.10.0, update to version 3.10.0 or later to resolve the issue. As a temporary workaround, consider regenerating API keys using a secure random string and hashing algorithm until a patch is available. Restrict access to sensitive resources using these API keys to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾