CVE-2024-22194 (published 2024-01-11T03:15Z)

cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in `cdo-local-uuid` at version `0.4.0`, and in `case-utils` in unpatched versions (matching the pattern `0.x.0`) at and since `0.5.0`, before `0.15.0`. The vulnerability stems from a Python function, `cdo_local_uuid.local_uuid()`, and its original implementation `case_utils.local_uuid()`. 

CVSS v3 base score: 2.8, LOW (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N)

Weakness information:
cwe_id: CWE-215
cwe_name: Insertion of Sensitive Information Into Debugging Code
description: The product inserts sensitive information into debugging code, which could expose this information if the debugging code is not disabled in production.
extended_description: When debugging, it may be necessary to report detailed information to the programmer.  However, if the debugging code is not disabled when the product is operating in a production environment, then this sensitive information may be exposed to attackers.
	 
         
cwe_id: CWE-337
cwe_name: Predictable Seed in Pseudo-Random Number Generator (PRNG)
description: A Pseudo-Random Number Generator (PRNG) is initialized from a predictable seed, such as the process ID or system time.
extended_description: The use of predictable seeds significantly reduces the number of possible seeds that an attacker would need to test in order to predict which random numbers will be generated by the PRNG.
         

Fix information:
repo_url: https://github.com/Cyber-Domain-Ontology/CDO-Utility-Local-UUID
commit_details: repo_url: https://github.com/Cyber-Domain-Ontology/CDO-Utility-Local-UUID
author: Keith Chason
author_date: 2023-12-14 00:04:07-05:00
msg: Merge pull request #3 from Cyber-Domain-Ontology/fix_command_in_top_srcdir_case
repository: repo_url: https://github.com/Cyber-Domain-Ontology/CDO-Utility-Local-UUID
repo_name: Cyber-Domain-Ontology/CDO-Utility-Local-UUID
repo_language: Python
owner: Cyber-Domain-Ontology
repo_url: https://github.com/casework/CASE-Utilities-Python
commit_details: repo_url: https://github.com/casework/CASE-Utilities-Python
author: Alex Nelson
author_date: 2023-12-22 15:13:59-05:00
msg: Merge branch 'release-0.12.1' into support-0.12.x
repository: repo_url: https://github.com/casework/CASE-Utilities-Python
repo_name: casework/CASE-Utilities-Python
repo_language: Python
owner: casework
repo_url: https://github.com/casework/CASE-Utilities-Python
commit_details: repo_url: https://github.com/casework/CASE-Utilities-Python
author: Alex Nelson
author_date: 2023-12-22 15:26:12-05:00
msg: Merge branch 'release-0.13.1' into support-0.13.x
repository: repo_url: https://github.com/casework/CASE-Utilities-Python
repo_name: casework/CASE-Utilities-Python
repo_language: Python
owner: casework
repo_url: https://github.com/casework/CASE-Utilities-Python
commit_details: repo_url: https://github.com/casework/CASE-Utilities-Python
author: Alex Nelson
author_date: 2023-12-22 14:43:22-05:00
msg: Merge branch 'release-0.10.1' into support-0.10.x
repository: repo_url: https://github.com/casework/CASE-Utilities-Python
repo_name: casework/CASE-Utilities-Python
repo_language: Python
owner: casework
repo_url: https://github.com/casework/CASE-Utilities-Python
commit_details: repo_url: https://github.com/casework/CASE-Utilities-Python
author: Alex Nelson
author_date: 2023-12-22 14:13:18-05:00
msg: Merge branches 'HotFix-0.9.1-refresh_pre_commit', 'HotFix-0.9.1-set_pandas_ceiling' and 'support-0.8.x' into release-0.9.1
repository: repo_url: https://github.com/casework/CASE-Utilities-Python
repo_name: casework/CASE-Utilities-Python
repo_language: Python
owner: casework
repo_url: https://github.com/casework/CASE-Utilities-Python
commit_details: repo_url: https://github.com/casework/CASE-Utilities-Python
author: Keith Chason
author_date: 2023-12-22 16:20:49-05:00
msg: Merge pull request #145 from casework/release-0.14.1

Release 0.14.1
repository: repo_url: https://github.com/casework/CASE-Utilities-Python
repo_name: casework/CASE-Utilities-Python
repo_language: Python
owner: casework
repo_url: https://github.com/casework/CASE-Utilities-Python
commit_details: repo_url: https://github.com/casework/CASE-Utilities-Python
author: Keith Chason
author_date: 2023-12-20 18:03:56-05:00
msg: Merge pull request #146 from casework/release-0.5.1

Release 0.5.1
repository: repo_url: https://github.com/casework/CASE-Utilities-Python
repo_name: casework/CASE-Utilities-Python
repo_language: Python
owner: casework
repo_url: https://github.com/casework/CASE-Utilities-Python
commit_details: repo_url: https://github.com/casework/CASE-Utilities-Python
author: Alex Nelson
author_date: 2023-12-22 13:12:57-05:00
msg: Merge branches 'HotFix-0.8.1-refresh_pre_commit' and 'support-0.7.x' into release-0.8.1
repository: repo_url: https://github.com/casework/CASE-Utilities-Python
repo_name: casework/CASE-Utilities-Python
repo_language: Python
owner: casework
repo_url: https://github.com/casework/CASE-Utilities-Python
commit_details: repo_url: https://github.com/casework/CASE-Utilities-Python
author: Alex Nelson
author_date: 2023-12-22 11:02:52-05:00
msg: Merge branches 'HotFix-0.7.1-set_pyshacl_ceiling' and 'support-0.6.x' into release-0.7.1
repository: repo_url: https://github.com/casework/CASE-Utilities-Python
repo_name: casework/CASE-Utilities-Python
repo_language: Python
owner: casework
repo_url: https://github.com/casework/CASE-Utilities-Python
commit_details: repo_url: https://github.com/casework/CASE-Utilities-Python
author: Alex Nelson
author_date: 2023-12-22 10:32:55-05:00
msg: Merge branches 'HotFix-0.6.1-refresh_pre_commit' and 'support-0.5.x' into release-0.6.1
repository: repo_url: https://github.com/casework/CASE-Utilities-Python
repo_name: casework/CASE-Utilities-Python
repo_language: Python
owner: casework
repo_url: https://github.com/casework/CASE-Utilities-Python
commit_details: repo_url: https://github.com/casework/CASE-Utilities-Python
author: Alex Nelson
author_date: 2023-12-22 14:55:21-05:00
msg: Merge branch 'release-0.11.1' into support-0.11.x
repository: repo_url: https://github.com/casework/CASE-Utilities-Python
repo_name: casework/CASE-Utilities-Python
repo_language: Python
owner: casework