Vulnerabilities > CVE-2013-2260 - Insufficient Entropy vulnerability in Cryptocat Project Cryptocat

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
cryptocat-project
CWE-331

Summary

Cryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy Weakness

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

  • Session Credential Falsification through Prediction
    This attack targets predictable session ID in order to gain privileges. The attacker can predict the session ID used during a transaction to perform spoofing and session hijacking.