CVE-2021-23126
[20210301] - Core - Insecure randomness within 2FA secret generation
Résumé
[20210301] - Core - Insecure randomness within 2FA secret generation
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered in Joomla! 3.2.0 through 3.9.24. Usage of the insecure rand() function within the process of generating the 2FA secret.
Paquets affectés
Bitnami
joomla
[{"type":"SEMVER","events":[{"introduced":"3.2.0"},{"fixed":"3.9.25"}]}]
Références
- advisory developer.joomla.org
- web nvd.nist.gov