PT-2021-4508 · Openid · Openid

Hitz + 1 · Published 2021-05-21 · Updated 2021-05-27 · CVE-2008-3280

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Medium

Base vector

AV:N/AC:H/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenID (affected versions not specified)

Description The issue is related to errors in the pseudorandom number generator code of the OpenID decentralized authentication system standard implementation. This could allow a remote attacker to disclose protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-338

Related Identifiers

BDU:2021-05146

CVE-2008-3280

Affected Products

Openid

References · 4

• 🔥 https://exploit-db.com/exploits/5720 · Exploit
• http://lists.openid.net/pipermail/openid-security/2008-August/000942.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-3280 · Security Note
• https://bdu.fstec.ru/vul/2021-05146 · Security Note