Main
Vulnerability Database
Exploits
ID:10131 - Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in StreamPipes - CVE-2024-29868
ID:10131 - Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in StreamPipes - CVE-2024-29868
Published: June 28, 2024
Vulnerability identifier: #VU93120
Vulnerability risk: High
CVE-ID: CVE-2024-29868
CWE-ID: CWE-338
Exploitation vector: Remote access
Vulnerable software:
StreamPipes
StreamPipes
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to compromise accounts of application users.
The vulnerability exists due to usage of a weak pseudo-random number generator for recovery tokens. A remote attacker can use the self-registration and password recovery mechanism to take over an arbitrary user account.
Remediation
Install updates from vendor's website.