CVE-2021-3689: Use of Insufficiently Random Values in yiisoft/yii2-dev
Use of Insufficiently Random Values in yiisoft/yii2-dev
Other sources
yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/yiisoft/yii2-devto a version that resolves this vulnerability.Fixed in 2.0.43
Event History
Frequently Asked Questions
What is the vulnerability ID of yii2?
The vulnerability ID of yii2 is CVE-2021-3689.
What is the severity of CVE-2021-3689?
The severity of CVE-2021-3689 is high with a severity value of 7.5.
How does CVE-2021-3689 affect yii2?
CVE-2021-3689 affects yii2 by making it vulnerable to Use of Predictable Algorithm in Random Number Generator.
Is there a fix available for CVE-2021-3689?
Yes, a fix is available for CVE-2021-3689. It can be found at the following link: [https://github.com/yiisoft/yii2/commit/13f27e4d920a05d53236139e8b07007acd046a46](https://github.com/yiisoft/yii2/commit/13f27e4d920a05d53236139e8b07007acd046a46)
Where can I find more information about CVE-2021-3689?
More information about CVE-2021-3689 can be found at the following link: [https://huntr.dev/bounties/50aad1d4-eb00-4573-b8a4-dbe38e2c229f](https://huntr.dev/bounties/50aad1d4-eb00-4573-b8a4-dbe38e2c229f)