Vulnerabilities > CVE-2011-2683 - 7PK - Security Features vulnerability in Reseed Project Reseed

047910
CVSS 5.9 - MEDIUM
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
high complexity
reseed-project
CWE-254
NVD
Published: 2017-10-23
Updated: 2024-11-21

Summary

reseed seeds random numbers from an insecure HTTP request to random.org during installation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a man-in-the-middle attack.

Vulnerable Configurations

Part Description Count
Application
Reseed_Project
1

Common Weakness Enumeration (CWE)

References