Vulnerabilities > CVE-2021-23126 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) vulnerability in Joomla Joomla!

047910
CVSS 5.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
low complexity
joomla
CWE-338
NVD
Published: 2021-03-04
Updated: 2024-11-21

Summary

An issue was discovered in Joomla! 3.2.0 through 3.9.24. Usage of the insecure rand() function within the process of generating the 2FA secret.

Vulnerable Configurations

Part Description Count
Application
Joomla
208

Common Weakness Enumeration (CWE)

References