PT-2019-6922 · Cryptocat+1 · Cryptocat+1

Published 2019-11-04 · Updated 2019-11-05 · CVE-2013-4102

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cryptocat versions prior to 2.0.22

Description The issue concerns a weakness in the random number generator, specifically with the use of Math.random() in the strophe.js component.

Recommendations For versions prior to 2.0.22, update to version 2.0.22 or later to resolve the issue.

Fix

Use of Insufficiently Random Values

Weakness Enumeration

CWE-330

Related Identifiers

CVE-2013-4102

Affected Products

Cryptocat

Strophe.Js

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2013-4102 · Security Note
• https://tobtu.com/decryptocat.php · Note
• https://openwall.com/lists/oss-security/2013/07/10/15 · Note
• https://vuldb.com/?id.9443 · Note
• https://securityfocus.com/bid/61095 · Note