CVE-2015-2913
1 advisory.
Maven/com.orientechnologies:orientdb-server CVE-2015-2913: medium 5.9, EPSS 1.86%
OrientDB Server Community Edition uses insufficiently random values to generate session IDs
Action: Upgrade com.orientechnologies:orientdb-server to 2.0.15 (2.0.x) or 2.1.1 (2.1.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.15 | - |
| 2.1.0 | 2.1.1 | - |
Fixed versions
| 2.0.15 | 2.1.1 |
Sources
- osv: GHSA-v6wr-fch2-vm5w
- https://nvd.nist.gov/vuln/detail/CVE-2015-2913
- https://github.com/orientechnologies/orientdb/commit/668ece96be210e742a4e2820a3085b215cf55104
- https://github.com/advisories/GHSA-v6wr-fch2-vm5w
- https://github.com/orientechnologies/orientdb
- https://www.kb.cert.org/vuls/id/845332
CVE-2015-2913 · published · modified · JSON