Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2021-3678
Summary
showdoc prior to 2.9.8 is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
- HIGH
- NETWORK
- NONE
- UNCHANGED
- NONE
- NONE
- HIGH
- NONE
CWE-338 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.
References
Advisory Timeline
- Published
