SecuritySpace - CVE-2015-2913

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2015-2913

Description: server/network/protocol/http/OHttpSessionManager.java in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 improperly relies on the java.util.Random class for generation of random Session ID values, which makes it easier for remote attackers to predict a value by determining the internal state of the PRNG in this class.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2015-2913
CERT/CC vulnerability note: VU#845332
https://www.kb.cert.org/vuls/id/845332

CVE ID:	CVE-2015-2913
Description:	server/network/protocol/http/OHttpSessionManager.java in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 improperly relies on the java.util.Random class for generation of random Session ID values, which makes it easier for remote attackers to predict a value by determining the internal state of the PRNG in this class.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-2913 CERT/CC vulnerability note: VU#845332 https://www.kb.cert.org/vuls/id/845332