CVE-2024-1579: Insufficient seeding of random number generator
Published Apr 29, 2024
·Updated
Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) vulnerability in Secomea GateManager (Webserver modules) allows Session Hijacking.This issue affects GateManager: before 11.2.624071020.
Affected Software
1 affected component
Secomea GateManager<11.2.624071020
Event History
Apr 29, 2024
CVE Published
via MITRE·01:27 PM
Data Sourced
via MITRE·01:27 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-1579?
CVE-2024-1579 has a critical severity rating due to the potential for session hijacking.
2
How do I fix CVE-2024-1579?
To fix CVE-2024-1579, upgrade Secomea GateManager to a version later than 11.2.624071020.
3
What kind of vulnerability is CVE-2024-1579?
CVE-2024-1579 is an Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) vulnerability.
4
Which versions of Secomea GateManager are affected by CVE-2024-1579?
CVE-2024-1579 affects Secomea GateManager versions before 11.2.624071020.
5
What is the impact of CVE-2024-1579?
The impact of CVE-2024-1579 includes the risk of session hijacking, allowing unauthorized access to user sessions.