Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h26r-h9wp-xxc4

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The SecureW2 3.0 TLS implementation uses weak random number generators (rand and srand from system time) during generation of the pre-master secret (PMS), which makes it easier for attackers to guess the secret and decrypt sensitive data.

The SecureW2 3.0 TLS implementation uses weak random number generators (rand and srand from system time) during generation of the pre-master secret (PMS), which makes it easier for attackers to guess the secret and decrypt sensitive data.

EPSS

Процентиль: 53%
0.00305
Низкий

Связанные уязвимости

nvd
больше 20 лет назад

The SecureW2 3.0 TLS implementation uses weak random number generators (rand and srand from system time) during generation of the pre-master secret (PMS), which makes it easier for attackers to guess the secret and decrypt sensitive data.

EPSS

Процентиль: 53%
0.00305
Низкий