CVE-2024-45719
published 2024-11-22CVE-2024-45719: Inadequate Encryption Strength vulnerability in Apache Answer. This issue affects Apache Answer: through 1.4.0. The ids generated using the UUID v1 version are…
PriorityP47low2.6CVSS 3.1
AVNACHPRHUIRSCCLINAN
EPSS
0.23%
13.6th percentile
Inadequate Encryption Strength vulnerability in Apache Answer.
This issue affects Apache Answer: through 1.4.0.
The ids generated using the UUID v1 version are to some extent not secure enough. It can cause the generated token to be predictable.
Users are recommended to upgrade to version 1.4.1, which fixes the issue.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | answer | < 1.4.1 | 1.4.1 |
| apache_software_foundation | apache_answer | <= 1.4.0 | — |
| github.com | apache_incubator-answer | >= 0 < 1.4.1 | 1.4.1 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Apache Answer: Predictable Authorization Token Using UUIDv1 in github.com/apache/incubator-answer
osv·2024-11-27
CVE-2024-45719 Apache Answer: Predictable Authorization Token Using UUIDv1 in github.com/apache/incubator-answer
Apache Answer: Predictable Authorization Token Using UUIDv1 in github.com/apache/incubator-answer
Apache Answer: Predictable Authorization Token Using UUIDv1 in github.com/apache/incubator-answer
GHSA
Apache Answer: Predictable Authorization Token Using UUIDv1
ghsa·2024-11-22
CVE-2024-45719 [LOW] CWE-326 Apache Answer: Predictable Authorization Token Using UUIDv1
Apache Answer: Predictable Authorization Token Using UUIDv1
Inadequate Encryption Strength vulnerability in Apache Answer.
This issue affects Apache Answer: through 1.4.0.
The ids generated using the UUID v1 version are to some extent not secure enough. It can cause the generated token to be predictable.
Users are recommended to upgrade to version 1.4.1, which fixes the issue.
OSV
Apache Answer: Predictable Authorization Token Using UUIDv1
osv·2024-11-22
CVE-2024-45719 [LOW] Apache Answer: Predictable Authorization Token Using UUIDv1
Apache Answer: Predictable Authorization Token Using UUIDv1
Inadequate Encryption Strength vulnerability in Apache Answer.
This issue affects Apache Answer: through 1.4.0.
The ids generated using the UUID v1 version are to some extent not secure enough. It can cause the generated token to be predictable.
Users are recommended to upgrade to version 1.4.1, which fixes the issue.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-11-22
Published