Lucene search
UnknownNODEJS:1464HistoryJan 23, 2020 - 6:13 p.m.
Insufficient Entropy
2020-01-2318:13:40
Unknown
www.npmjs.com
28
EPSS
0.002
Percentile
58.6%
Overview
Versions of cryptiles prior to 4.1.2 are vulnerable to Insufficient Entropy. The randomDigits() method does not provide sufficient entropy and its generates digits that are not evenly distributed.
Recommendation
Upgrade to version 4.1.2. The package is deprecated and has been moved to @hapi/cryptiles and it is strongly recommended to use the maintained package.
References
Related
nvd
nvd
CVE-2018-1000620
2018-07-09 20:29:00
nodejs
nodejs
Insufficient Entropy
2018-11-01 18:32:48
redhatcve
redhatcve
CVE-2018-1000620
2018-07-25 05:20:13
osv
osv
Insufficient Entropy in cryptiles
2018-09-11 18:22:50
CVE-2018-1000620
2018-07-09 20:29:00
prion
prion
Design/Logic Flaw
2018-07-09 20:29:00
cvelist
cvelist
CVE-2018-1000620
2018-07-09 20:00:00
cve
cve
CVE-2018-1000620
2018-07-09 20:29:00
github
github
Insufficient Entropy in cryptiles
2018-09-11 18:22:50
veracode
veracode
Insecure Random Number Generation
2018-07-10 07:42:04
