CVEvulnerability

CVE-2013-5391

5.3 MEDIUM Published 2018-04-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2018-04-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.3 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
3.5 LOW — AV:N/AC:M/Au:S/C:P/I:N/A:N
Weaknesses
CWE-310

Description

IBM Worklight Consumer and Enterprise Editions 5.0.x before 5.0.6 Fix Pack 2 and 6.0.x before 6.0.0 Fix Pack 2, and Mobile Foundation Consumer and Enterprise Editions 5.0.x before 5.0.6 Fix Pack 2 and 6.0.0 Fix Pack 2 make it easier for attackers to defeat cryptographic protection mechanisms by leveraging improper initialization of the pseudo random number generator (PRNG) in Android and use of the Java Cryptography Architecture (JCA) by a Worklight program. IBM X-Force ID: 87128.

Affected configurations

• ibm worklight 5.0.0.0 • ibm worklight 5.0.5.0 • ibm worklight 5.0.6.0 • ibm worklight 6.0.0.0 • ibm mobile foundation 5.0.0.0 • ibm mobile foundation 5.0.5.0 • ibm mobile foundation 5.0.6.0 • ibm mobile foundation 6.0.0.0

Related

Weakness · not in database (1)

References