CVE-2022-29035CWE-330

In JetBrains Ktor Native before version 2.0.0 random values used for nonce generation weren't using SecureRandom implementations

Low · published April 11, 2022

CVSS v3.1
3.3
EPSS
1%
Percentile
49.1
In the wild
Unconfirmed
What it is

In JetBrains Ktor Native before version 2.0.0 random values used for nonce generation weren't using SecureRandom implementations

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00621 · 49.1th percentile
Weakness
CWE-330 · Use of Insufficiently Random Values
Published
2022-04-11T18:12Z
EPSS history
Timeline
  • 11 APR 18:12Z
    In JetBrains Ktor Native before version 2.0.0 random values used for nonce generation weren't using SecureRandom implementations
    cvelistv5