CVE-2024-29868
1 advisory.
Maven/org.apache.streampipes:streampipes-resource-management CVE-2024-29868: critical 9.1
Apache StreamPipes: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Recovery Token Generation
Action: Upgrade org.apache.streampipes:streampipes-resource-management to 0.95.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.69.0 | 0.95.0 | - |
Fixed versions
| 0.95.0 |
Sources
- osv: GHSA-cf3q-vg8w-mw84
- https://nvd.nist.gov/vuln/detail/CVE-2024-29868
- https://github.com/apache/streampipes/commit/1d94191c49617dffbcb6f6d8fd73bcd5dd597d52
- https://github.com/apache/streampipes
- https://lists.apache.org/thread/g7t7zctvq2fysrw1x17flnc12592nhx7
- http://www.openwall.com/lists/oss-security/2024/06/22/1
CVE-2024-29868 · published · modified · JSON