CVE-2019-3795: Insufficient Entropy in PRNG
(updated )
Spring Security contain an insecure randomness vulnerability when using SecureRandomFactoryBean#setSeed
to configure a SecureRandom
instance. In order to be impacted, an honest application must provide a seed and make the resulting random material available to an attacker for inspection.
References
Detect and mitigate CVE-2019-3795 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →