PT-2022-11682 · Unknown · Fredsmith Utils

Published 2022-12-25 · Updated 2024-05-17 · CVE-2021-4277

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions fredsmith utils (affected versions not specified)

Description A problematic issue has been found in the processing of the file screenshot sync of the component Filename Handler. The manipulation leads to predictable data from observable state.

Recommendations It is recommended to apply a patch to fix this issue. The name of the patch is dbab1b66955eeb3d76b34612b358307f5c4e3944.

Fix

Use of Insufficiently Random Values

Weakness Enumeration

CWE-330

CWE-341

Related Identifiers

CVE-2021-4277

Affected Products

Fredsmith Utils

References · 5

• https://osv.dev/vulnerability/CVE-2021-4277 · Vendor Advisory
• ❌ https://github.com/fredsmith/utils/commit/dbab1b66955eeb3d76b34612b358307f5c4e3944 · Patch, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2021-4277 · Security Note
• https://vuldb.com/?id.216749 · Note
• https://t.me/cvenotify/40642 · Telegram Post