CVE-2023-4472 in Opinio

الملخص

بحسب MITRE • 02/02/2024

Objectplanet Opinio version 7.22 and prior uses a cryptographically weak pseudo-random number generator (PRNG) coupled to a predictable seed, which could lead to an unauthenticated account takeover of any user on the application.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• حجز: 21/08/2023
• إفشاء: 02/02/2024
• الاعتدال: تمت الموافقة
• إدخال: VDB-252666
• CPE: جاهز
• CWE: CWE-335 (مؤكد)
• CVSS: 9.8 (NVD)
• EPSS: 0.00621
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-4472
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-4472
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-4472/