Lucene search
HistoryFeb 01, 2024 - 10:15 p.m.
CVE-2023-4472
objectplanet opinio
prng weakness
unauthenticated account takeover
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.6
Confidence
High
EPSS
0.001
Percentile
51.2%
Objectplanet Opinio version 7.22 and prior uses a cryptographically weak pseudo-random number generator (PRNG) coupled to a predictable seed, which could lead to an unauthenticated account takeover of any user on the application.
Affected configurations
Node
objectplanetopinioRange<7.23
| Vendor | Product | Version | CPE |
|---|---|---|---|
| objectplanet | opinio | * | cpe:2.3:a:objectplanet:opinio:*:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2024-02-01 22:15:00
vulnrichment
vulnrichment
CVE-2023-4472 Cryptographically weak PRNG in Opinio 7.22
2024-02-01 22:11:21
cvelist
cvelist
CVE-2023-4472 Cryptographically weak PRNG in Opinio 7.22
2024-02-01 22:11:21
nessus
nessus
cve
cve
CVE-2023-4472
2024-02-01 22:15:55
freebsd
freebsd
chromium -- use after free in MediaStream
2023-08-29 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.6
Confidence
High
EPSS
0.001
Percentile
51.2%
Related for NVD:CVE-2023-4472