Описание
An issue was discovered in Matrix Sydent before 1.0.3 and Synapse before 0.99.3.1. Random number generation is mishandled, which makes it easier for attackers to predict a Sydent authentication token or a Synapse random ID.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| cosmic | ignored | end of life |
| devel | not-affected | 0.99.2-5 |
| disco | ignored | end of life |
| eoan | not-affected | 0.99.2-5 |
| esm-apps/bionic | released | 0.24.0+dfsg-1ubuntu0.1~esm1 |
| esm-apps/focal | not-affected | 0.99.2-5 |
| esm-apps/jammy | not-affected | 0.99.2-5 |
| esm-infra-legacy/trusty | DNE | |
| focal | not-affected | 0.99.2-5 |
Показывать по
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
An issue was discovered in Matrix Sydent before 1.0.3 and Synapse before 0.99.3.1. Random number generation is mishandled, which makes it easier for attackers to predict a Sydent authentication token or a Synapse random ID.
An issue was discovered in Matrix Sydent before 1.0.3 and Synapse befo ...
matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG
ALT-PU-2019-1784: package `matrix-synapse` update to version 0.99.3.2-alt1
5 Medium
CVSS2
7.5 High
CVSS3