Lucene search
Veracode Vulnerability DatabaseVERACODE:4931HistoryAug 21, 2017 - 2:48 p.m.
Insecure Random Number Generation
2017-08-2114:48:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
EPSS
0.001
Percentile
40.1%
simplesamlphp is vulnerable to insecure random number generation. The library does not use a cryptographically secure number generator, using the first 16 bits of the hash of the given secret instead.
References
Related
nvd
nvd
CVE-2017-12871
2017-09-01 21:29:00
cve
cve
CVE-2017-12871
2017-09-01 21:29:00
ubuntucve
ubuntucve
CVE-2017-12871
2017-09-01 00:00:00
debiancve
debiancve
CVE-2017-12871
2017-09-01 21:29:00
friendsofphp
friendsofphp
Incorrect IV generation for encryption
2017-03-30 09:51:00
osv
osv
CVE-2017-12871
2017-09-01 21:29:00
SimpleSAMLphp Incorrect IV generation for encryption
2022-05-17 01:17:12
cvelist
cvelist
CVE-2017-12871
2017-09-01 21:00:00
github
github
SimpleSAMLphp Incorrect IV generation for encryption
2022-05-17 01:17:12
prion
prion
Design/Logic Flaw
2017-09-01 21:29:00