CVE-2021-23020

Name of the Vulnerable Software and Affected Versions NAAS versions prior to 3.10.0

Description The issue concerns the generation of API keys using an insecure pseudo-random string and hashing algorithm, which could lead to predictable keys.

Recommendations For versions prior to 3.10.0, update to version 3.10.0 or later to resolve the issue. As a temporary workaround, consider regenerating API keys using a secure random string and hashing algorithm until a patch is available. Restrict access to sensitive resources using these API keys to minimize the risk of exploitation.