Количество 2
Количество 2
CVE-2019-10754
больше 6 лет назад
Multiple classes used within Apereo CAS before release 6.1.0-RC5 makes use of apache commons-lang3 RandomStringUtils for token and ID generation which makes them predictable due to RandomStringUtils PRNG's algorithm not being cryptographically strong.
CVSS3: 8.1
EPSS: Низкий
GHSA-g24w-373r-5pxg
больше 3 лет назад
Use of Insufficiently Random Values in Apereo CAS
CVSS3: 8.1
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2019-10754 Multiple classes used within Apereo CAS before release 6.1.0-RC5 makes use of apache commons-lang3 RandomStringUtils for token and ID generation which makes them predictable due to RandomStringUtils PRNG's algorithm not being cryptographically strong. | CVSS3: 8.1 | 0% Низкий | больше 6 лет назад |
| GHSA-g24w-373r-5pxg Use of Insufficiently Random Values in Apereo CAS | CVSS3: 8.1 | 0% Низкий | больше 3 лет назад |
Уязвимостей на страницу
20