GrepRules
Sign inPublish rule
Explore/cve-2024-0765-predictable-uid-from-date

CVE-2024-0765: Predictable Uid From Date

Generating a unique identifier (UID) using timestamps without a secure random number generator makes the identifier predictable. This can lead to insecure direct object references or capability guessing.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0JS
greprules fetch cve-2024-0765-predictable-uid-from-date --engine opengrep

Description

Generating a unique identifier (UID) using timestamps without a secure random number generator makes the identifier predictable. This can lead to insecure direct object references or capability guessing.

License
Apache-2.0
Source context
Public repository
Source
Provally CVE rule catalog
Validation status
Verified
Quality signals
146 downloads0 direct146 via packs
· 0 stars · Quality score 66How quality works
Included packs
2 packs