diff --git a/advisories/unreviewed/2022/05/GHSA-q4v3-wmm6-hcrx/GHSA-q4v3-wmm6-hcrx.json b/advisories/github-reviewed/2022/05/GHSA-q4v3-wmm6-hcrx/GHSA-q4v3-wmm6-hcrx.json similarity index 65% rename from advisories/unreviewed/2022/05/GHSA-q4v3-wmm6-hcrx/GHSA-q4v3-wmm6-hcrx.json rename to advisories/github-reviewed/2022/05/GHSA-q4v3-wmm6-hcrx/GHSA-q4v3-wmm6-hcrx.json index 71b7875c8be..c4d05685e9b 100644 --- a/advisories/unreviewed/2022/05/GHSA-q4v3-wmm6-hcrx/GHSA-q4v3-wmm6-hcrx.json +++ b/advisories/github-reviewed/2022/05/GHSA-q4v3-wmm6-hcrx/GHSA-q4v3-wmm6-hcrx.json @@ -1,17 +1,39 @@ { "schema_version": "1.4.0", "id": "GHSA-q4v3-wmm6-hcrx", - "modified": "2022-05-05T00:29:22Z", + "modified": "2024-02-23T21:26:31Z", "published": "2022-05-05T00:29:22Z", "aliases": [ "CVE-2013-0294" ], + "summary": "pyrad is vulnerable to the use of Insufficiently Random Values", "details": "packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute force attack.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" + } ], "affected": [ - + { + "package": { + "ecosystem": "PyPI", + "name": "pyrad" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "2.1" + } + ] + } + ] + } ], "references": [ { @@ -30,6 +52,14 @@ "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/82133" }, + { + "type": "PACKAGE", + "url": "https://github.com/pyradius/pyrad" + }, + { + "type": "WEB", + "url": "https://web.archive.org/web/20200228160027/http://www.securityfocus.com/bid/57984" + }, { "type": "WEB", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115677.html" @@ -45,19 +75,15 @@ { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2013/02/15/13" - }, - { - "type": "WEB", - "url": "http://www.securityfocus.com/bid/57984" } ], "database_specific": { "cwe_ids": [ - + "CWE-330" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2024-02-23T21:26:31Z", "nvd_published_at": "2020-01-28T16:15:00Z" } } \ No newline at end of file