CVE-2021-29245

Medium

BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key.

mitre·CWE-338·Published 2021-05-05

CVSS

5.3

EPSS

0.01

KEV

No

Exploits

0

cve.orgen

115 chars

BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key.

NVDen

115 chars

BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key.

NVDes

138 chars

BTCPay Server versiones hasta 1.0.7.0, usa un método débil Next para producir valores pseudoaleatorios para generar una clave API heredada

2

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.1	Primary	NVD	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N