In short
- CVE-2019-25061 is a HIGH (CVSS 7.5) vulnerability affecting random_password_generator, random password generator (random password generator project).
- Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.8% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
Description
The random_password_generator (aka RandomPasswordGenerator) gem through 1.0.0 for Ruby uses Kernel#rand to generate passwords, which, due to its cyclic nature, can facilitate password prediction.
NVD description
The random_password_generator (aka RandomPasswordGenerator) gem through 1.0.0 for Ruby uses Kernel#rand to generate passwords, which, due to its cyclic nature, can facilitate password prediction.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free