java: insecure random numbers
| Package(s): | IBM Java 6 |
CVE #(s): | CVE-2014-0878
|
| Created: | May 30, 2014 |
Updated: | June 4, 2014 |
| Description: |
From the Novell bug entry:
The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7 before Service Refresh 7, and 7R1 before Service Refresh 1 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the random number generator's output.
|
| Alerts: |
|
