PT-2019-12525 · Matrix+2 · Matrix Sydent+3

CVE-2019-11842 · Publicado 2019-05-09 · Atualizado 2026-07-09

Positive Technologies (AI Summary)

CVSS v4.0

8.7

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Matrix Sydent versions prior to 1.0.3 Synapse versions prior to 0.99.3.1

Description An issue was discovered that makes it easier for attackers to predict a Sydent authentication token or a Synapse random ID due to mishandled random number generation.

Recommendations For Matrix Sydent versions prior to 1.0.3, update to version 1.0.3 or later. For Synapse versions prior to 0.99.3.1, update to version 0.99.3.1 or later.

Correção

Enumeração de Fraquezas

CWE-338

Identificadores relacionados

ALT-PU-2019-1784

CVE-2019-11842

GHSA-GWF7-VFJF-WF6X

PYSEC-2019-185

PYSEC-2026-2620

USN-6076-1

Produtos afetados

Alt Linux

Matrix Sydent

Synapse

Ubuntu

Referências · 22

• https://github.com/pypa/advisory-database/tree/main/vulns/matrix-synapse/PYSEC-2019-185.yaml · Nota
• https://osv.dev/vulnerability/GHSA-gwf7-vfjf-wf6x · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2019-11842 · Aviso do Fabricante
• https://osv.dev/vulnerability/PYSEC-2026-2620 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-16515 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-11842 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-11842 · Nota de Segurança
• https://ubuntu.com/security/CVE-2019-11842 · Aviso do Fabricante
• https://matrix.org/blog/2019/05/03/security-updates-sydent-1-0-3-synapse-0-99-3-1-and-riot-android-0-9-0-0-8-99-0-8-28-a · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2019-11842 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-11842 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-6076-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-18835 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-10657 · Aviso do Fabricante
• https://pypi.org/project/matrix-sydent · Nota