CVE-2021-3678
Assigner: @huntrdev
Published: 2021-08-04T13:14:29
State: PUBLISHED
affected: product: star7th/showdoc
vendor: star7th
versions: lessThanOrEqual: 2.9.7
status: affected
version: unspecified
versionType: custom
descriptions: value: showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
metrics: cvssV3_0: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.0
problemTypes: descriptions: cweId: CWE-338
description: CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
type: CWE
source: advisory: f9a9defd-29ea-4442-b692-ff1512813de4
discovery: EXTERNAL
title: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc