CVE-2021-23020CWE-330

The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which could lead to predictable keys

published June 1, 2021

CVSS
—
EPSS
0%
Percentile
16.2
In the wild
Unconfirmed
What it is

The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which could lead to predictable keys.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00255 · 16.2th percentile
Weakness
CWE-330 · Use of Insufficiently Random Values
Published
2021-06-01T12:14Z
EPSS history
Timeline
  • 01 JUN 12:14Z
    The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which could lead to predictable keys
    cvelistv5