CVE-2024-45719

Name of the Vulnerable Software and Affected Versions: Apache Answer versions through 1.4.0

Description: The issue is related to inadequate encryption strength in Apache Answer, specifically with the use of UUID v1 version for generating ids. This can cause the generated token to be predictable, potentially leading to sensitive data exposure.

Recommendations: For Apache Answer versions through 1.4.0, upgrade to version 1.4.1 to fix the issue. As a temporary workaround, consider restricting the use of UUID v1 version for generating ids until the upgrade is applied.