PT-2022-8283
CVE-2019-25061
·
تاريخ النشر
2022-05-18
·
تاريخ التحديث
2022-05-26
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
random password generator gem versions through 1.0.0
Description
The issue concerns the use of Kernel#rand to generate passwords, which has a cyclic nature that can facilitate password prediction. This affects the random password generator gem for Ruby.
Recommendations
For versions through 1.0.0, consider using an alternative method for password generation that does not rely on Kernel#rand to minimize the risk of password prediction.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾