CVE-2023-30797

Published April 19th, 2023

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

N/A

Affected

PROJECTS

Description

Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials. The insufficiently random values may allow an attacker to guess the credentials and gain access to resources managed by Lemur.

Netflix/security-bulletins

Security Bulletins that relate to Netflix Open Source

GitHub

746

Netflix/lemur

Repository for the Lemur Certificate Manager

GitHub

1.77K