Vulnerability Bulletins

CVE-2019-11842

   
Affected software MATRIX SYNAPSE
 
An issue was discovered in Matrix Sydent before 1.0.3 and Synapse before 0.99.3.1. Random number generation is mishandled, which makes it easier for attackers to predict a Sydent authentication token or a Synapse random ID.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2019-11842