Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-4472

Cryptographically weak PRNG in Opinio 7.22

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Mandiant

Description

Objectplanet Opinio version 7.22 and prior uses a cryptographically weak pseudo-random number generator (PRNG) coupled to a predictable seed, which could lead to an unauthenticated account takeover of any user on the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Objectplanet Opinio

Default version status: affected

  • 7.22affected
  • 7.23unaffected

References