CVE-2021-3692: Use of Predictable Algorithm in Random Number Generator in yiisoft/yii2
yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/yiisoft/yii2-devto a version that resolves this vulnerability.Fixed in 2.0.43
Event History
Frequently Asked Questions
What is CVE-2021-3692?
CVE-2021-3692 is a vulnerability in yii2 that allows an attacker to predict the random number generator algorithm.
What is the severity of CVE-2021-3692?
The severity of CVE-2021-3692 is high with a severity value of 5.3.
How does CVE-2021-3692 affect yii2?
CVE-2021-3692 affects yii2 versions from 2.0.0 to 2.0.43.
How can I fix CVE-2021-3692 in yii2?
To fix CVE-2021-3692 in yii2, you should update to a version that includes the fix, such as the commit 13f27e4d920a05d53236139e8b07007acd046a46 on the yii2 GitHub repository.
Are there any references for CVE-2021-3692?
Yes, you can find references for CVE-2021-3692 on the following links: [GitHub Commit](https://github.com/yiisoft/yii2/commit/13f27e4d920a05d53236139e8b07007acd046a46) and [Huntr Bounty](https://huntr.dev/bounties/55517f19-5c28-4db2-8b00-f78f841e8aba).