Количество 2
Количество 2
CVE-2019-10755
The SAML identifier generated within SAML2Utils.java was found to make use of the apache commons-lang3 RandomStringUtils class which makes them predictable due to RandomStringUtils PRNG's algorithm not being cryptographically strong. This issue only affects the 3.X release of pac4j-saml.
GHSA-rc75-cf5c-mxvh
Use of Cryptographically Weak Pseudo-Random Number Generator in org.pac4j:pac4j-saml
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2019-10755 The SAML identifier generated within SAML2Utils.java was found to make use of the apache commons-lang3 RandomStringUtils class which makes them predictable due to RandomStringUtils PRNG's algorithm not being cryptographically strong. This issue only affects the 3.X release of pac4j-saml. | CVSS3: 4.9 | 0% Низкий | больше 6 лет назад |
| GHSA-rc75-cf5c-mxvh Use of Cryptographically Weak Pseudo-Random Number Generator in org.pac4j:pac4j-saml | CVSS3: 4.9 | 0% Низкий | больше 6 лет назад |
Уязвимостей на страницу