CVE-2021-3689: Use of Predictable Algorithm in Random Number Generator in yiisoft/yii2
Published Aug 10, 2021
·Updated
yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator
Affected Software
1 affected component
Yiiframework Yii>=2.0.0<2.0.43
Remediation
Event History
Aug 10, 2021
CVE Published
via MITRE·10:21 AM
Data Sourced
via MITRE·10:21 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Oct 14, 58461
Event
08:00 PM
Frequently Asked Questions
1
What is the vulnerability ID of yii2?
The vulnerability ID of yii2 is CVE-2021-3689.
2
What is the severity of CVE-2021-3689?
The severity of CVE-2021-3689 is high with a severity value of 7.5.
3
How does CVE-2021-3689 affect yii2?
CVE-2021-3689 affects yii2 by making it vulnerable to Use of Predictable Algorithm in Random Number Generator.
4
Is there a fix available for CVE-2021-3689?
Yes, a fix is available for CVE-2021-3689. It can be found at the following link: [https://github.com/yiisoft/yii2/commit/13f27e4d920a05d53236139e8b07007acd046a46](https://github.com/yiisoft/yii2/commit/13f27e4d920a05d53236139e8b07007acd046a46)
5
Where can I find more information about CVE-2021-3689?
More information about CVE-2021-3689 can be found at the following link: [https://huntr.dev/bounties/50aad1d4-eb00-4573-b8a4-dbe38e2c229f](https://huntr.dev/bounties/50aad1d4-eb00-4573-b8a4-dbe38e2c229f)