PT-2022-8283

CVE-2019-25061

·

تاريخ النشر

2022-05-18

·

تاريخ التحديث

2022-05-26

الوصف من

CVSS 3.1
7.5
عالية
المقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions random password generator gem versions through 1.0.0
Description The issue concerns the use of Kernel#rand to generate passwords, which has a cyclic nature that can facilitate password prediction. This affects the random password generator gem for Ruby.
Recommendations For versions through 1.0.0, consider using an alternative method for password generation that does not rely on Kernel#rand to minimize the risk of password prediction. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
GHSA-GGFX-H9XJ-5V9C
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾