cvelist/2021/3xxx/CVE-2021-3689.json

{
   "CVE_data_meta":{
      "ASSIGNER":"security@huntr.dev",
      "ID":"CVE-2021-3689",
      "STATE":"PUBLIC",
      "TITLE":"Use of Predictable Algorithm in Random Number Generator in yiisoft/yii2"
   },
   "affects":{
      "vendor":{
         "vendor_data":[
            {
               "product":{
                  "product_data":[
                     {
                        "product_name":"yiisoft/yii2",
                        "version":{
                           "version_data":[
                              {
                                 "version_affected":"<=",
                                 "version_value":"2.0.42.1"
                              }
                           ]
                        }
                     }
                  ]
               },
               "vendor_name":"yiisoft"
            }
         ]
      }
   },
   "data_format":"MITRE",
   "data_type":"CVE",
   "data_version":"4.0",
   "description":{
      "description_data":[
         {
            "lang":"eng",
            "value":"yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator"
         }
      ]
   },
   "impact":{
      "cvss":{
         "attackComplexity":"HIGH",
         "attackVector":"NETWORK",
         "availabilityImpact":"HIGH",
         "baseScore":8.1,
         "baseSeverity":"HIGH",
         "confidentialityImpact":"HIGH",
         "integrityImpact":"HIGH",
         "privilegesRequired":"NONE",
         "scope":"UNCHANGED",
         "userInteraction":"NONE",
         "vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
         "version":"3.0"
      }
   },
   "problemtype":{
      "problemtype_data":[
         {
            "description":[
               {
                  "lang":"eng",
                  "value":"CWE-1241 Use of Predictable Algorithm in Random Number Generator"
               }
            ]
         }
      ]
   },
   "references":{
      "reference_data":[
         {
            "name":"https://huntr.dev/bounties/50aad1d4-eb00-4573-b8a4-dbe38e2c229f",
            "refsource":"CONFIRM",
            "url":"https://huntr.dev/bounties/50aad1d4-eb00-4573-b8a4-dbe38e2c229f"
         },
         {
            "name":"https://github.com/yiisoft/yii2/commit/13f27e4d920a05d53236139e8b07007acd046a46",
            "refsource":"MISC",
            "url":"https://github.com/yiisoft/yii2/commit/13f27e4d920a05d53236139e8b07007acd046a46"
         }
      ]
   },
   "source":{
      "advisory":"50aad1d4-eb00-4573-b8a4-dbe38e2c229f",
      "discovery":"EXTERNAL"
   }
}