Not rated

CVE-2019-10755 The SAML identifier generated within SAML2Utils.java was found to make use of the apache commons-lang3 RandomStringUtils…

Description

The SAML identifier generated within SAML2Utils.java was found to make use of the apache commons-lang3 RandomStringUtils class which makes them predictable due to RandomStringUtils PRNG's algorithm not being cryptographically strong. This issue only affects the 3.X release of pac4j-saml.

Affected products and versions

Product	Affected versions	Fixed in
PAC4J For SAML Protocol	Versions not published

Do you use PAC4J For SAML Protocol?

Track this CVE Watch PAC4J For SAML Protocol Check my SBOMs

www.cveye.io/en/cve/CVE-2019-10755

Timeline

Published September 23, 2019
Last modified August 4, 2024

References

snyk.io snyk.io

Track this CVE